RedKitten Campaign Targets Iranian Protest Monitors with AI Malware
First seen 2 Feb 2026, 20:55 UTC
•


•79% similarity
•34.3
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The RedKitten campaign has emerged, utilizing AI-driven malware to target individuals and organizations monitoring human rights violations during the Dey 1404 protests in Iran. Discovered by HarfangLab, the campaign employs a C2 implant named SloppyMIO, delivered through macro-enabled Excel spreadsheets disguised as casualty lists. The campaign is linked to Iranian state interests and aims at human rights NGOs and activists.
ThreatCluster AI