Iran-nexus threat actor leverages government impersonation to deploy novel malware against Iraqi officials

Weekly insights on threats, vulnerabilities, and security best practices.

Iranian APT Dust Specter deploys novel SPLITDROP and GHOSTFORM malware through Ministry of Foreign Affairs impersonation campaigns targeting Iraqi government infrastructure.

UNC2814 Chinese threat actors executed a 9-year campaign targeting telecoms and governments across 42 countries. Analysis reveals advanced TTPs, infrastructure persistence, and critical sector focus.

CRESCENTHARVEST campaign deploys custom RAT malware against Iran protest supporters, demonstrating advanced surveillance TTPs for long-term information theft and monitoring operations.