Do Son Group-IB exposed MuddyWater using NordVPN to send phishing emails that deliver the Phoenix v4 backdoor. The malware steals credentials via a custom Chromium stealer disguised as a calculator.
NordVPN
An Iranian-aligned group abused a compromised Omani Foreign Ministry mailbox to send spear-phishing emails to diplomats and international organizations in a global campaign.
Is NordVPN the right choice for you? Read my detailed NordVPN Review to find out how it enhances your internet security.
Learn about the recent campaign by Helldown ransomware group targeting Zyxel devices and the vulnerabilities exploited.