A Sneaky SideTwist from APT34

APT34, the notorious Iranian threat actor, has been associated with a new phishing attack that aids in deploying a backdoor variant known as SideTwist.
The attack technology applied by APT34 is considered highly advanced, indicates NSFOCUS Security Labs. The bad actor is capable of designing unique intrusion tactics for diverse targets and possesses supply chain attack capabilities.

The Cunning SideTwist from APT34

The notorious Iranian actor APT34, often considered a digital boogeyman, has once again made headlines. They’ve been linked to a fresh phishing attack that assists the deployment of a backdoor variant, conspicuously dubbed “SideTwist”. Looks like the squad at APT34 is staging their own version of the famous Chubby Checker dance.

APT34’s Sophisticated Toolset

APT34 is not your average malicious actor on the cyber stage. According to the latest spotlight report published by NSFOCUS Security Labs, they roll out the red carpet for attack technology. With an arsenal capable of creating unique intrusion methods tailored to different types of targets, they make the cyber predators in the Jurassic Park look like outdated T-Rex. As if that was not impressive enough, they also boast supply-chain attack capabilities. Maybe let’s not ask them for an equipment supply order, lest we end up with a surprise delivery of a Trojan horse.

In Summary

Iranian cyber group APT34 has been associated with a new phishing attack deploying a variant of a backdoor called SideTwist. Coupled with their known prowess in advanced attack mechanisms and the ability to customize intrusions, the threat actor’s tactics are as twisted as the SideTwist malware itself. NSFOCUS Security Labs shed light on APT34’s extensive capabilities, further underscoring the group’s volatility and dangerousness in the cyber threat landscape. It’s a reminder to us all to stay vigilant in the cyber world, because, unlike a buggy software update, there’s no ‘undo’ button for these threat actors’ actions.

Original Article: https://thehackernews.com/2023/09/alert-phishing-campaigns-deliver-new.html