Midv-279

: This is the largest publicly available identity document dataset, containing 72,409 annotated images .

| Event | Date | Source | |-------|------|--------| | First sample observed in the wild | 03 Feb 2025 | VirusTotal, Hybrid Analysis | | Public attribution to “APT‑34 (Charming Kitten)” | 15 Mar 2025 | Mandiant Threat Intelligence Report | | Inclusion in MITRE ATT&CK as | 06 Apr 2025 | MITRE ATT&CK v13 | | Release of a sandbox‑evading proof‑of‑concept | 21 Oct 2025 | GitHub repository (private) – later taken down | MIDV-279

The true intentions of MIDV-279 remain unclear, but researchers have made several educated guesses based on its behavior and capabilities: : This is the largest publicly available identity

Organizations should therefore adopt , maintain up‑to‑date threat‑intel feeds , and consider behavioral analytics as the primary defense against this evolving, file‑less threat. maintain up‑to‑date threat‑intel feeds