Skip to content
archiveAPT / state · 02 Sep 2026 · 10:25 UTC

Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware

last 60 dispatches · spectrum

Mirage Kitten used fake LinkedIn coding tests to spread NodeRabbit and PollCat, even banning AI tools that could have spotted the malware. …

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected