Two separate phishing campaigns have been distributing the new variants of the SideTwist and AgentTesla backdoors, according to The Hacker News. Attacks spreading the SideTwist variant were launched by Iranian advanced persistent threat group APT34, also known as Helix Kitten, OilRig, Hazel Sandstorm, and Cobalt Gypsy, which facilitated compromise through a Microsoft Word document laced with a malicious macro, a report from NSFOCUS Security Labs revealed.

Source: SC Magazine