The group seeks out aerospace professionals by impersonating job recruiters, a demographic it has targeted in the past as well, then deploys the SlugResin backdoor malware.
First seen on darkreading.com
Jump to article: www.darkreading.com/cyberattacks-data-breaches/iranian-cybercriminals-aerospace-workers-linkedin