That WhatsApp from an Israeli infosec expert could be a Iranian phish

The cyber-ops arm of Iran’s Islamic Revolutionary Guard Corps has started a spear-phishing campaign intent on stealing credentials from Israeli journalists, cybersecurity experts, and computer science professors from leading Israeli universities.

This latest phishing expedition, which Check Point Research pins on Iran’s Charming Kitten crew (aka APT42, Mint Sandstorm, and Educated Manticore) began earlier this month, shortly after Israel’s air strikes against Iran.

Charming Kitten employed more than 130 unique domains and numerous subdomains, using one or two for each targeted individual, researcher Sergey Shykevich told The Register.