Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

Iran-backed cyber actors, known as OilRig, are linked to a spear-phishing campaign featuring a new malware strain called Menorah, designed for cyber espionage. This discovery follows recent findings of another OilRig phishing attack deploying a new SideTwist malware variant. The targets of these attacks are not confirmed, but at least one seems to be based in Saudi Arabia.