Charming Kitten was found using spear-phishing attacks against UK experts who study the Middle East. The attacks involved impersonating scholars from the University of London's School of Oriental and African Studies and prompted the victims to either turn over sensitive information or download malware onto their systems.