{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreicupzyyszggevkbzrtxt3g6ap2ck4nyrfmgkh4f4v5ss3xo5pzukm",
    "uri": "at://did:plc:6wtxqaikjf62unmnajbfbq5v/app.bsky.feed.post/3mfiv7sdju7w2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreibpognzqb4p3dik4qo6vy4jsywde6jbarm2xkfkqbjr4yet37r56y"
    },
    "mimeType": "image/webp",
    "size": 117022
  },
  "path": "/crescentharvest-campaign-targets-iran-protesters-with-rat-malware/",
  "publishedAt": "2026-02-23T03:59:40.000Z",
  "site": "https://vpncentral.com",
  "tags": [
    "News",
    "CRESCENTHARVEST Campaign Targets Iran Protesters with RAT Malware",
    "VPN Central"
  ],
  "textContent": "Acronis researchers uncovered CRESCENTHARVEST, a cyber espionage campaign hitting Iran protest supporters since January 9, 2026. Attackers use fake protest files to deliver RAT malware for spying and data theft. No confirmed infections yet. The campaign bundles real protest images, videos, and Farsi reports with malicious LNK files disguised as media. Iran-aligned hackers likely aim […]\n\nThe post CRESCENTHARVEST Campaign Targets Iran Protesters with RAT Malware appeared first on VPN Central.",
  "title": "CRESCENTHARVEST Campaign Targets Iran Protesters with RAT Malware"
}