Tag: apt42

All the articles with the tag "apt42".

• TAMECAT: APT42's New PowerShell Backdoor Targeting Military and Government Officials

  27 Apr 2026

  Technical analysis of the Iranian APT42 group's TAMECAT PowerShell backdoor, featuring fileless execution, Telegram-based C2 channels, multi-layer AES encryption evasion, and VBScript phishing delivery mechanisms targeting high-value military and government personnel.