Iranian APT Targets US With Drokbk Spyware via GitHub : vima

The custom malware used by the state-backed Iranian threat group Drokbk has so far flown under the radar by using GitHub as a "dead-drop resolver" to more easily evade detection.

Related Keywords

Albania , Saudi Arabia , Australia , United States , United Kingdom , Israel , Iran , Iranian , Github Apis , Rafe Pilling , Us Treasury Department , Shell , Cobalt Mirage , Secureworks Counter Threat Unit , Fast Reverse Proxy , Backed Threat Groups Evolving , Mose Staff , Homeland Justice , ,