CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware The Hacker News
❓ Unknown
CRESCENTHARVEST Campaign Uses RAT Malware Against Iranian Protest Supporters
Feb 19, 2026
February 19, 2026
1 min read
📰 Google
📋 Key Takeaway
The CRESCENTHARVEST campaign has been identified as targeting supporters of protests in Iran with Remote Access Trojan (RAT) malware. This operation is believed to be aimed at suppressing dissent and monitoring activists. The situation highlights the ongoing digital threats faced by those advocating for change in Iran.
🔍 Quick Context Guide
💡 Bottom Line:
The use of RAT malware against protest supporters reflects the ongoing digital war against dissent in Iran.
👥 Key Players
CRESCENTHARVEST Campaign
MENTIONED
Cyber operation targeting activists
"This campaign represents the ongoing efforts by state or state-affiliated actors to suppress dissent in Iran."
Iranian Protest Supporters
MENTIONED
Activists advocating for change
"They are crucial in the fight for human rights and democratic reforms in Iran."
📰 What Happened
The CRESCENTHARVEST campaign has been identified as using Remote Access Trojan (RAT) malware to target supporters of protests in Iran, aiming to suppress dissent and monitor activists.
- The malware allows attackers to gain remote access to victims' devices.
- This operation highlights the digital threats faced by Iranian activists.
💡 Why It Matters
🇮🇷 For Iran: This operation underscores the lengths to which the Iranian government will go to control dissent and monitor activists.
🌍 Regional: It may embolden other authoritarian regimes in the region to adopt similar tactics against dissent.
🌐 International: International observers may view this as a violation of human rights, potentially leading to calls for sanctions or other actions against Iran.
📚 Background
Iran has seen significant protests in recent years, driven by demands for political reform and human rights, leading to increased government crackdowns.
Cybersecurity in Iran
Human rights in Iran
📡 Source:
NEUTRAL
📊 Confidence:
70%
The Hacker News is generally regarded as a reliable source for cybersecurity news but should be cross-referenced with other reports for a comprehensive view.
🏷️ Entities Mentioned
🌐
Translated from the original and edited for English readers. View original source →
Translation confidence: 100%
📰 Related Coverage
Just now •
Davoud Rokhbin Executed for Murder in Kashan Prison
Just now •
Ali Mokhtari Executed for Rape in Shahre Kord
24 min ago •
This Edible Oil Reduces Death from Cognitive Decline!
34 min ago •
Chinese Scientists Dismissed Following Death of Child in Gene-Editing Trial
38 min ago •