Iran cybersnoops still LARPing as ransomware crooks in espionage ops

Iranian intelligence cyber unit posed as Chaos ransomware gang to hide state-sponsored espionage operation, using phishing campaign and social engineering to gain access to targets' credentials. The attackers then executed various commands and downloaded payloads, including backdoor malware. The operation was spotted by Researchers at Rapid7 earlier this year.