Iranian hackers use new #Moneybird #ransomware to attack Israeli orgs
#Iran's #Agrius has been actively targeting entities in #Israel and #MiddleEast region since at least 2021 under multiple aliases while deploying data wipers in destructive attacks. #ThreatActors initially gain access to corporate networks by exploiting vulnerabilities in public-facing servers, hide behind Israel-based #ProtonVPN to deploy #ASPXSpy, exfiltrating data, then encrypt files using AES-256
https://www.bleepingcomputer.com/news/security/iranian-hackers-use-new-moneybird-ransomware-to-attack-israeli-orgs/