The Iran-nexus menace actor generally known as UNC2428 has been noticed delivering a backdoor generally known as MURKYTOUR as a part of a job-themed social engineering marketing campaign geared toward Israel in October 2024.
Google-owned Mandiant described UNC2428 as a menace actor aligned with Iran that engages in cyber espionage-related operations. The intrusion set is alleged to have distributed the malware by a “advanced
Iran-Linked Hackers Goal Israel with MURKYTOUR Malware through Pretend Job Marketing campaign
