Iran intelligence backdoored US bank, airport, software outfit networks
2026-03-05T19:24:15Z•2ba79d005e5c121143fe6674b6faa9ca9400504ca464c9f97a840c1b72a85e9c
API-key-theftBing-AIChromeDDoSGemini-panelGhostSocksGoogle-GeminiIranLexisNexisMOISMuddyWaterOpenClawPerplexity-CometReact2ShellSteaelite-RAT','ransomware','data-theft','North-Korea','supply-backdoorcalendar-invitedata-breachimplantinformation-stealerlocal-file-exposuremalicious-installernation-stateprivilege-escalationsurveillance-cameras
What happened
A broad set of active threats and incidents was reported: MOIS-linked MuddyWater operators deployed a new custom backdoor implanted in multiple US organisations (bank, airport, software firm); several Iran-associated crews have targeted internet-connected surveillance cameras and launched DDoS/espionage activity amid regional strikes; attackers pushed malicious OpenClaw fake installers via Bing AI results delivering info-stealers and GhostSocks; LexisNexis Legal & Professional confirmed a breach (crooks claim ~2GB via a React2Shell exploit); Chrome had a high-severity Gemini panel privilege-es
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 2ba79d005e5c121143fe6674b6faa9ca9400504ca464c9f97a840c1b72a85e9c
- Enrichment time
- 2026-03-05T19:24:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.