Charming Kitten Deploys BellaCiao in Middle East Attacks

A malware known as BellaCiao has been attributed to the Charming Kitten threat actor. The malware has been targeting multiple organizations in the Middle East. Bitdefender researchers have analyzed the malware and found that it is designed to remain undetected and evade analysis by using a multi-stage infection process and modular architecture. The primary objective of BellaCiao is to exfiltrate sensitive data from compromised systems by establishing a communication channel with its command-and-control server. Furthermore, the malware uses various persistence mechanisms, such as disguising itself as legitimate software and using scheduled tasks to maintain its activity.