RedKitten Campaign Targets Iranian Protest Monitors with AI Malware

RedKitten Campaign Targets Iranian Protest Monitors with AI Malware

First seen 2 Feb 2026, 20:55 UTC Infosecurity-MagazineTechnaduVoi.IdScworld 79% similarity 34.3

Article Content

Browse articles
ThreatCluster

The RedKitten campaign has emerged, utilizing AI-driven malware to target individuals and organizations monitoring human rights violations during the Dey 1404 protests in Iran. Discovered by HarfangLab, the campaign employs a C2 implant named SloppyMIO, delivered through macro-enabled Excel spreadsheets disguised as casualty lists. The campaign is linked to Iranian state interests and aims at human rights NGOs and activists.

ThreatCluster AI

Community

Browse all →