Iranian APT Intrusion Masquerades as Chaos Ransomware Attack

SecurityWeek roundup: Multiple high-impact incidents and advisories. An Iranian APT (likely MuddyWater) conducted an intrusion disguised as a Chaos ransomware attack using social engineering, persistence, credential harvesting and data theft. A trojanized Daemon Tools supply-chain installer was distributed globally and dropped a sophisticated backdoor on a limited set of high-value targets. A new Quasar Linux RAT is targeting software developers with remote access, surveillance and credential-exfiltration capabilities. Palo Alto disclosed an actively exploited PAN‑OS Captive Portal zero-day (C