Iran’s Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

Charming Kitten, an Iranian hacking group, has been deploying a new C++ variant of BellaCiao malware, dubbed BellaCPP. BellaCPP, lacking the web shell functionality of its predecessor, is used to establish covert SSH tunnels and is delivered through weaponized security flaws in applications like Microsoft Exchange Server.