Tag: credential-theft

Nation-State Roundup: Iran-Nexus APT Targets Iraq Officials, Phobos Admin Pleads Guilty, Multi-Year Campaign Exposed

Iranian threat actors are actively targeting Iraqi government officials with previously unknown malware families, while law enforcement secured a guilty plea from a Phobos ransomware administrator. Separately, researchers uncovered a multi-year campaign targeting high-value sectors that went undetected for years.

Mar 6, 2026Security Affairs, Palo Alto Unit 42

aptiraniraq

🏴Phobos

highVulnerabilities & Exploits

Supply Chain Worms and State-Sponsored Malware: Weekend Threat Roundup

Active npm supply chain worm harvests crypto keys and CI secrets while Iranian APT MuddyWater deploys new malware targeting MENA organizations in coordinated campaign.

Feb 23, 2026The Hacker News, SANS ISC

supply-chainnpmmalware

🇮🇷MuddyWater🇷🇺Sandworm

mediumMalware & Threats

Hudson Rock Warns: Infostealers Weaponize OpenClaw Configurations

Hudson Rock researchers warn that infostealers are targeting OpenClaw configuration files to steal victim credentials and digital assets.

Feb 17, 2026Infosecurity Magazine

infostealeropenclawcredential-theft