Iranian state-sponsored hackers linked to the IRGC have launched sophisticated spear-phishing attacks targeting Israeli cybersecurity professionals, journalists, and academics. The "Educated Manticore" group, connected to APT35/APT42, uses fake personas to build trust before directing vict...
Iranian threat actor UNC2428 deployed the MURKYTOUR backdoor in a job-themed social engineering campaign targeting Israelis in October 2024. Posing as recruiters from defense contractor Rafael, attackers directed victims to a fake website to download "RafaelConnect.exe," which installed ma...
Iranian state-sponsored malware IOCONTROL targets critical infrastructure in Israel and the US, affecting IoT devices and OT/SCADA systems across multiple manufacturers. With sophisticated features including modular design, encrypted communications, and remote command execution capabilitie...
