Iranian APT Targets US With Drokbk Spyware via GitHub

The custom malware used by the state-backed Iranian threat group Drokbk has so far flown under the radar by using GitHub as a "dead-drop resolver" to more easily evade detection.

Related Keywords

Albania ,Saudi Arabia ,Australia ,United States ,United Kingdom ,Israel ,Iran ,Iranian ,Github Apis ,Rafe Pilling ,Us Treasury Department ,Shell ,Cobalt Mirage ,Secureworks Counter Threat Unit ,Fast Reverse Proxy ,Backed Threat Groups Evolving ,Mose Staff ,Homeland Justice , ,