Cybersecurity incident — 2019-03-04 00:00:00
Affected organization: Turkish government entity
Affected country: Turkey
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Political-Espionage
Actor: Ministry of Intelligence and Security (MOIS) (APT39 REMIX KITTEN)
Actor type: Nation-State
Actor country: Iran (Islamic Republic of)

Researchers from Palo Alto Networks reveal that the Iran-linked Chafer APT group used a new Python-based backdoor in recent attacks aimed at a Turkish government entity.