Iranian Hackers Deploy NightLedger Backdoor in Multi-Region Attacks

Iranian state-backed group Nimbus Manticore has been linked to new attacks across the Middle East, Africa, and South Asia using a previously unseen Windows backdoor called NightLedger. The intrusions also employ two custom WebSocket tunnelers to turn victim systems into covert relays. The campaign targets entities in multiple regions, expanding the group's known operational scope.