An Iranian cyber espionage group has shifted tactics, and has deployed a custom backdoor implant.

Muddywater, an Iranian cyber espionage group, has deployed a custom backdoor implant in a shift from previous tactics. The implant is deployed via malicious PDF files with an embedded link. The implant has been in use since at least May, but has been updated many times. Researchers have noted that the software has many bugs and each update introduces new issues.

Read more:

https://www.darkreading.com/threat-intelligence/iranian-threat-group-drops-new-backdoor-bugsleep