Iran's APT34 Conducts Supply Chain Attack on UAE

---

🇮🇷 Iran's APT34 Conducts Supply Chain Attack on UAE.

Iran's APT34, also known as OilRig, has launched a supply chain attack targeting government entities in the United Arab Emirates (UAE). The attackers used a fake IT job recruitment form as bait, sending it to an IT company in the UAE. When the victim opened the malicious document to apply for the advertised job, info-stealing malware was executed, allowing APT34 to access sensitive information and credentials. The group then used the victim's email infrastructure for command-and-control communication and data exfiltration, specifically aiming to target government clients. The attack bears similarities to a previous APT34 supply chain intrusion in Jordan, indicating the group's ongoing threat in the region.

Read more from Dark Reading ▶