CRESCENTHARVEST uses protest lures and malicious LNK files to deploy RAT malware targeting Iran protest supporters for espionage and data theft.
Self-hosted agents execute code with durable credentials and process untrusted input. This creates dual supply chain risk, ...