BellaCiao Malware Archives

A C++ version of the well-known virus BellaCiao has been seen being used by the Iranian nation-state hacking collective Charming Kitten. The artifact was found as part of a "recent" investigation into a hacked machine in Asia that was also infected with the BellaCiao malware, according to Russian cybersecurity firm Kaspersky, which named the new variant BellaCPP. In April 2023, Romanian cybersecurity company Bitdefender published the first documentation about BellaCiao, characterizing it as a customized dropper that could deliver extra payloads. The hacking gang has used the virus in cyberattacks against India, the Middle East, and the United States. The Charming Kitten actor has created numerous custom malware families over the years, and this is one of them read more about Iran...

A new piece of malware known as BellaCiao is being actively used by the well-known Iranian nation-state group Charming Kitten to target many victims in the United States, Europe, the Middle East, and India, adding to its ever-growing collection of unique tools. BellaCiao is a "personalized dropper" that can deploy additional malware payloads onto a target computer in response to instructions from an actor-controlled server, according to research by Bitdefender Labs. "Each sample collected was tied up to a specific victim and included hard-coded information read more Charming Kitten's New BellaCiao Malware Discovered in Multi-Country Attacks. With ReconBee.com Stay ahead of the latest threats with in-depth coverage of cyber attacks and cybersecurity trends, and the latest cybersec...

Tag: BellaCiao Malware

Iran’s Charming Kitten Deploys BellaCPP A New C++ Variant of BellaCiao Malware

Charming Kitten’s New BellaCiao Malware Discovered in Multi-Country Attacks