Iran-affiliated threat actor Charming Kitten conducted a social-engineering and credential-phishing campaign targeting two Human Rights Watch staff members and at least eighteen other high-profile activists, journalists, researchers, academics, diplomats, and politicians working on Middle East issues in 2022.