APT42

APT42

actor · actor:apt42

Iranian MOIS/IRGC-aligned espionage and social-engineering actor. Per Google GTIG (reported via Recorded Future/Insikt Group, 2026-07-16) it uses Gemini as an engineering platform to accelerate development of specialized malicious tools and feeds the model target biographies to script multi-turn rapport-building phishing conversations before payload delivery.

Aliases: GreenBravo, Charming Kitten, Mint Sandstorm

Coverage timeline

first 2026-07-19 → last 2026-07-19

Peak priority

notable

1 notable

Sources cited

4 hosts

Sections touched

weekly-research

Co-occurring entities

no co-occurrence

ATT&CK techniques

pinned v19.1 · see below

ATT&CK techniques

3 techniques observed across 1 entry — derived from entry metadata and body evidence, never asserted without a published entry behind it · pinned to MITRE ATT&CK v19.1 · compare on the matrix · Navigator layer (JSON)

Reconnaissance TA0043

T1595.002Active Scanning: Vulnerability Scanning×1

Adversaries may scan victims for vulnerabilities that can be used during targeting. Vulnerability scans typically check if the configuration of a target host/application (ex: software and version) potentially aligns with the target of a specific exploit the adversary may seek to use.

Evidence: 2026-07-19/weekly-w29-ai-tradecraft-accelerant · ATT&CK page ↗

Resource Development TA0042

T1587.001Develop Capabilities: Malware×1

Adversaries may develop malware and malware components that can be used during targeting. Building malicious software can include the development of payloads, droppers, post-compromise tools, backdoors (including backdoored images), packers, C2 protocols, and the creation of infected removable media. Adversaries may develop malware to support their operations, creating a means for maintaining control of remote machines, evading defenses, and executing post-compromise behaviors.

Evidence: 2026-07-19/weekly-w29-ai-tradecraft-accelerant · ATT&CK page ↗

Initial Access TA0001

T1566Phishing×1

Adversaries may send phishing messages to gain access to victim systems. All forms of phishing are electronically delivered social engineering. Phishing can be targeted, known as spearphishing. In spearphishing, a specific individual, company, or industry will be targeted by the adversary. More generally, adversaries can conduct non-targeted phishing, such as in mass malware spam campaigns.

Evidence: 2026-07-19/weekly-w29-ai-tradecraft-accelerant · ATT&CK page ↗

Entries about APT42 (1)

2026-07-19 · view entry permalink →

NOTABLENATOB2

The week's AI-and-attackers reporting converged on a calibrated read — AI is accelerating existing tradecraft, not creating a new attack class — and handed defenders a concrete hunt signal: emoji and Unicode artefacts in compiled-malware debug strings

The prior two weeklies tracked AI moving "from target to operator." This week the reporting matured into a calibration, and the useful output for a technical defender is less the narrative than one concrete hunt technique.

The calibrated read. Recorded Future's Insikt Group synthesised cyber, information-operations and military reporting on Iran's 2026 conflict activity and concluded that "AI has almost certainly enhanced Iran's asymmetric tactics and hybrid warfare doctrine, but has not fundamentally altered the strategic logic underpinning Iran's approach" (Recorded Future / Insikt Group, 2026-07-16). GuidePoint's Q2 review, cutting directly against the alarmist framing, likewise assessed that "the prevailing concern that AI will enable a new class of catastrophic AI-native attacks remains largely unrealized" (Cybersecurity Dive on GuidePoint GRIT, 2026-07-09, pre-window background). Both frame AI as an effort-multiplier — which the week's field evidence bears out: Trend Micro's Patriot Bait analysis documented a jailbroken Gemini agent autonomously writing, deploying and self-repairing a replacement C2 server and confirming bot reconnection in six minutes, with the human operator contributing an estimated ~11% (Trend Micro, 2026-07-14).

Where the acceleration bites — and leaves a fingerprint. Insikt's technically concrete threads are reconnaissance (CloudSEK reproduced CyberAv3ngers-style LLM-agent ICS recon and found "an actor can move from intent to a list of accessible US ICS devices with known default credentials in under five minutes"), phishing (Google GTIG documented APT42 feeding Gemini a target biography to script multi-turn rapport-building conversations), and malware development. It is the last that yields a defender signal: across four independently-reporting labs, Insikt notes emoji/Unicode artefacts in compiled malware — Group-IB found the Rust-based CHAR backdoor's debug strings carried emojis, "a trait rarely seen in human-authored code," and ZScaler, Check Point and HarfangLab reported similar indicators in separate Iran-nexus toolsets — assessed as an AI-generation artefact operators failed to sanitise before compilation. Separately, Check Point's AI Security Report identifies the durable agent-compromise primitive as a planted configuration file an AI agent loads and trusts persistently, meaning any config or memory store an agent trusts is a persistence surface needing integrity monitoring (Check Point, 2026-07-14).

a trait rarely seen in human-authored code

Group-IB (via Recorded Future / Insikt Group, on emoji debug strings in the CHAR malware)

The prevailing concern that AI will enable a new class of catastrophic AI-native attacks remains largely unrealized.

Cybersecurity Dive (on GuidePoint GRIT Q2 2026) 2026-07-09

Builds on: 2026-07-14/check-point-annual-ai-security-report-2026 · 2026-07-14/patriot-bait-jailbroken-gemini-cli-autonomous-c2

research19 Jul 23:26Zmulti-sourceOpen finding ↗

Sources: Recorded Future / Insikt Group · Check Point Research · Trend Micro (TrendAI Research) · Cybersecurity Dive (on GuidePoint GRIT Q2 2026)

Hunting pivots

ATT&CK techniques

Reconnaissance TA0043

Resource Development TA0042

Initial Access TA0001

Story timeline

Where this entity is cited

Source distribution

Entries about APT42 (1)

The week's AI-and-attackers reporting converged on a calibrated read — AI is accelerating existing tradecraft, not creating a new attack class — and handed defenders a concrete hunt signal: emoji and Unicode artefacts in compiled-malware debug strings