From dc054efb622084f17df3c19908f3d168471a028e Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Mon, 13 Nov 2023 04:36:56 -0800
Subject: [PATCH] [threat-actors] Add Caracal Kitten

---
 clusters/threat-actor.json | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index aaabd00..6c5cf7d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12882,6 +12882,20 @@
       },
       "uuid": "ec6bcaa9-4cb3-4397-a735-c806bc986c81",
       "value": "WIRTE"
+    },
+    {
+      "description": "Caracal Kitten is an APT group that has been targeting activists associated with the Kurdistan Democratic Party. They employ a mobile remote access Trojan to gain unauthorized access to victims' devices. The group disguises their malware as legitimate mobile apps, tricking users into installing them and granting the hackers access to their personal data.",
+      "meta": {
+        "refs": [
+          "https://deform.co/hacker-group-caracal-kitten-targets-kdp-activists-with-malware/",
+          "https://www.ctfiot.com/138538.html"
+        ],
+        "synonyms": [
+          "APT-Q-58"
+        ]
+      },
+      "uuid": "46a67fdf-5376-4d01-8092-6549a20030af",
+      "value": "Caracal Kitten"
     }
   ],
   "version": 293