CRESCENTHARVEST Campaign Targets Iran Protesters with RAT Malware

Acronis researchers uncovered CRESCENTHARVEST, a cyber espionage campaign hitting Iran protest supporters since January 9, 2026. Attackers use fake protest files to deliver RAT malware for spying and data theft. No confirmed infections yet. The campaign bundles real protest images, videos, and Farsi reports with malicious LNK files disguised as media. Iran-aligned hackers likely aim […] The post CRESCENTHARVEST Campaign Targets Iran Protesters with RAT Malware appeared first on VPN Central.