Financial threat group UAC-0006 is conducting a phishing campaign targeting customers of Ukraine’s largest state-owned bank, PrivatBank, using password-protected archives to deploy SmokeLoader malware. Cybersecurity experts noted overlaps in the group’s tactics with EmpireMonkey and Russia-linked FIN7. The SmokeLoader malware is largely used for data theft, unauthorized access, and financial gain.

Iran’s MuddyWater Hackers Hit US Firms with New 'Dindoor' Backdoor – Infosecurity Magazine
Iran’s MuddyWater Hackers Hit US Firms with New ‘Dindoor’ Backdoor Infosecurity Magazine


