A Farsi-speaking threat actor linked to Iranian state interests is believed to be behind a campaign named RedKitten, targeting NGOs and individuals documenting recent human rights abuses. This activity, noted by HarfangLab in January 2026, aligns with the nationwide unrest in Iran that erupted towards the end of 2025. The campaign highlights ongoing efforts to suppress information related to human rights violations in the country. Observers remain vigilant to the implications of this targeted cyber activity.
