PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Charming Kitten Updates POWERSTAR with an InterPlanetary Twist

volexity.com | research | #vulnerability-research | #threat-intelligence | #phishing | #apt | #powershell | #iran | #threat-actor | #spear-phishing | #charming-kitten | #charmpower | #powerstar | #volexity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Volexity works with many individuals and organizations often subjected to sophisticated and highly targeted spear-phishing campaigns from a variety of nation-state-level threat actors. In the last few years
Published
Collected

Related coverage

research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
research · volexity.com
CharmingCypress: Innovating Persistence
# CharmingCypress: Innovating Persistence February 13, 2024 Ankur Saini, Callum Roxan, Charlie Gardner, and Damien Cash Through its managed security services offerings, Volexity routinely...
research · volexity.com
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
On May 25, 2021, Volexity identified a phishing campaign targeting multiple organizations based in the United States and Europe. The following industries have been observed being targeted thus far: NGOs […]
vulnerability · volexity.com
Patchwork APT Group Targets US Think Tanks
In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
research · volexity.com
APT Meets GPT: Targeted Operations with Untamed LLMs
# APT Meets GPT: Targeted Operations with Untamed LLMs October 8, 2025 Callum Roxan, Killian Raimbaud, and Steven Adair Starting in June 2025, Volexity detected a series of spear phishing...
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
Back