Charming Kitten Strikes Again: New BellaCPP Malware Unleashed in Global Cyber Espionage!
Charming Kitten, an Iranian hacking group, is now deploying BellaCPP, a C++ variant of the BellaCiao malware. Known for clever social-engineering and exploiting security flaws, this group continues its cyber antics targeting regions like the U.S., Middle East, and India. BellaCPP ditches the web shell but maintains its sneaky persistence.

Hot Take:
When Charming Kitten decides to upgrade its malware arsenal, it does so with the elegance befitting a feline. Say hello to BellaCPP, the C++ version of BellaCiao, proving that even malware gets a glow-up. Watch out, world! These digital kittens are not here to play with yarn.
Key Points:
- Charming Kitten, an Iranian hacking group, is deploying a C++ variant of BellaCiao malware known as BellaCPP.
- Originally documented by Bitdefender, BellaCiao is a custom dropper for delivering additional payloads.
- The group is linked to Iran’s Islamic Revolutionary Guard Corps and has multiple aliases.
- Attacks have utilized known security flaws in applications like Microsoft Exchange Server.
- BellaCPP lacks the web shell functionality present in BellaCiao but retains covert tunneling features.
Already a member? Log in here