Iranian APT Nimbus Manticore has adopted new tactics in its attacks against aviation and software companies.

The Iranian threat group Nimbus Manticore has adopted new tactics and malware variants in campaigns against aviation and software companies. Recent operations used AppDomain hijacking, trojanized installers, and phishing lures posing as airlines or job recruiters. The group deployed updated backdoors such as MiniJunk and MiniFast, enabling persistence, file manipulation, and remote command execution. Analysts note the group’s rapid tooling evolution, potentially aided by AI‑assisted development, and a growing focus on U.S. targets.

Read more:

https://www.securityweek.com/iranian-apt-targets-aviation-software-companies-with-updated-tools/