Iranian Hackers Exploit VPN Vulnerabilities to Infiltrate Middle East Critical Infrastructure for 2 Years

Iranian state-sponsored group Lemon Sandstorm conducted a sophisticated two-year cyber campaign against critical infrastructure in the Middle East from May 2023 to February 2025. The attackers exploited VPN vulnerabilities, deployed multiple backdoors including HanifNet and HXLibrary, and ...