Iranian Threat Actor Nimbus Manticore Expands Campaigns into Europe with Advanced Malware and Fake Job Lures

Key Highlights Check Point Research is actively tracking Iranian threat actor Nimbus Manticore. Our latest findings show it is expanding operations into Europe and now targeting the defense, telecom, and aerospace sectors. The group uses fake job portals and spear‑phishing to lure victims, delivering malicious files disguised as part of hiring processes, all while impersonating major local and global aerospace companies. Evolving malware such as MiniJunk and MiniBrowse help attackers stay hidden, steal data, and maintain long‑term access. Campaigns align with IRGC strategic priorities, focusing on intelligence collection on sensitive defense vendors during periods of heightened geopolitical tension. Introduction Since […]

The post Iranian Threat Actor Nimbus Manticore Expands Campaigns into Europe with Advanced Malware and Fake Job Lures appeared first on Check Point Blog.