APT-C-50

APT-C-50 is the designation used by 360 Threat Intelligence Center (Chinese researchers) for the Iranian mobile surveillance cluster known as Domestic Kitten. The group has been active since at least 2016 and focuses on monitoring Iranian dissidents, Kurdish minorities, and diaspora communities through fake Android applications that harvest personal data from infected devices. APT-C-50 operations align precisely with the Domestic Kitten and Rampant Kitten activity documented by Check Point Research, targeting individuals perceived as threats to the Iranian regime inside and outside Iran.