Charming Kitten Strikes Again: New BellaCPP Malware Puts Networks on Edge!
Charming Kitten is back with a new C++ malware variant, BellaCPP. This malware continues the BellaCiao legacy with some fresh code but skips the webshell. It’s like updating your wardrobe but leaving out the flashy hat. Beware; Charming Kitten’s evolving tricks can still sneak past your security gate!
Hot Take:
Looks like Charming Kitten needs to brush up on their geography! With all this international malware travel, BellaCiao and its C++ sibling BellaCPP seem to be on a world tour, leaving a trail of digital breadcrumbs the size of Texas. You’d think they’d at least send postcards!
Key Points:
- Charming Kitten, an Iran-linked APT group, has developed a new C++ variant of the BellaCiao malware, named BellaCPP.
- The original BellaCiao malware was first identified in April 2023 and is known for its webshell persistence and covert tunneling abilities.
- BellaCPP was discovered on a computer in Asia alongside the original BellaCiao malware, suggesting a connection between the two.
- Despite similarities, BellaCPP lacks a hardcoded webshell but mimics BellaCiao’s domain generation patterns and operations.
- The discovery underscores the importance of thorough network investigations, as sophisticated attackers can evade detection with novel malware samples.
Already a member? Log in here