Targeting of Iranian reformists
Date of report
  • August 2021
Iranian-linked threat actor Charming Kitten deployed Android malware and WhatsApp exploits to spy on reformist politicians within the country. The Android malware, known as LittleLooter, was especially sophisticated and was able to record almost all actions taken on a compromised device.
Suspected victims
  • Reformist politicians in Iran
Suspected state sponsor
  • Iran (Islamic Republic of)
Type of incident
  • Espionage
Target category
  • Civil society