Magic Hound

Magic Hound is an Iranian-sponsored threat group that conducts long-term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. The group has targeted European, U.S., and Middle Eastern government and military personnel, academics, journalists, and organizations such as the World Health Organization (WHO) since at least 2014, using complex social engineering campaigns. Magic Hound is also known by aliases including APT35, Charming Kitten, and Newscaster, and is associated with malware such as ASPXSHELLSV and PUPYRAT.