Nation-stateNov 12, 2024
Iranian “Dream Job” Campaign 11.24
ClearSky Cyber Security identified an Iranian state-sponsored campaign attributed to TA455 (Charming Kitten subgroup) targeting the aerospace industry through fake job offers. The campaign distributed SnailResin malware, which deploys the SlugResin backdoor for post-compromise access.
Summary
ClearSky Cyber Security identified an Iranian state-sponsored campaign attributed to TA455 (Charming Kitten subgroup) targeting the aerospace industry through fake job offers. The campaign distributed SnailResin malware, which deploys the SlugResin backdoor for post-compromise access.
Indicators of Compromise
- malware — SnailResin
- malware — SlugResin
- mitre_attack — TA455
- mitre_attack — Charming Kitten