New research out from @DomainTools Investigations today!
We took time to pull apart the "Charming Kitten" data dump and analyze it accordingly.
Always fascinating to me how different the threat actor groups can be both domestically and regionally. In APT35's case, much more militarily regimented, versus hybrid "state startup waterfall" or "criminal-state merge blend" setups.