Cybersecurity incident — 2023-11-30 00:00:00
Affected organization: Telecommunications companies in Sudan
Affected country: Sudan
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of Network Infrastructure
Motive: Political-Espionage
Actor: Ministry of Intelligence and Security (MOIS) (APT 34 OilRig)
Actor type: Nation-State
Actor country: Iran (Islamic Republic of)

Researchers from Broadcom/Symantec discover a campaign carried on by the cyber-espionage group Seedworm, linked to Iran's intelligence service, targeting telecommunications companies in Egypt, Sudan and Tanzania via the MuddyC2Go framework and a custom keylogger.