New IMAPLoader malware attacks deployed by Iranian threat operation

Iranian state-sponsored operation Tortoiseshell has initiated new watering hole attacks to circulate IMAPLoader malware – targeting maritime, shipping, and logistics industries in the Mediterranean. The PwC Threat Intelligence team reports that as well as using manipulated websites, a falsified Microsoft Excel document was used to aid attacks. Industries globally including nuclear, aerospace, and defence in the U.S. and Europe continue to be threatened by the malware.