CRESCENTHARVEST uses protest lures and malicious LNK files to deploy RAT malware targeting Iran protest supporters for espionage and data theft.
The charges stem from multiple incidents in spring 2024 where he allegedly entered the apartment of the woman who lived above Capital Bee Company.