An Iranian cyberattack group known as Seedworm — thought to be linked to Iran’s government — has started using new tools, including a custom download utility and commodity ransomware, as part of their attacks on companies and government agencies in the broader Middle East region, according to Broadcom’s Symantec division. Seedworm appears to be deploying several variants of a new downloader, known as PowGoop, to more recent targets, Symantec researchers stated in an analysis published.

Read full article on Dark Reading