Iran's APTs are shipping AI-written malware that runs entirely in memory - and finding live US ICS in 5 minutes. https://intel.threadlinqs.com/threat/TL-2026-1417 #ThreatIntel #GhostFetch #GhostBackDoor #HTTP_VIP

#MuddyWater is back with #OperationOlalampo, deploying four new malware families including CHAR – a rust backdoor, GhostFetch – a loader that deploys GhostBackDoor, and HTTP_VIP – a loader and a backdoor.…

🔁 RT @GroupIB_TI | reposted by @cyb3rops
https://x.com/GroupIB_TI/status/2024800744189071442