AI Security
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
State-backed actors leverage new NightLedger backdoor to weaponize victim networks for regional espionage.
The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions involve t...
THN
The Hacker News
Source
The Hacker News
AI Analysis
Generated insight by OnAirToday AI
The use of custom WebSocket tunnelers by Nimbus Manticore demonstrates a sophisticated shift toward utilizing compromised infrastructure as covert relay nodes. This strategy significantly complicates threat detection by blending malicious traffic with legitimate network communications.
Powered by AI • Not a substitute for human analysisMore Insights →
Share
Filed under:AI Security
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.