External Publication
Visit Post

MiniUpdate RAT uses Azure-hosted C2 domains in Iran-linked espionage campaigns

VPN Central [Unofficial] May 25, 2026
Source
Unit 42 researchers have linked new MiniUpdate and MiniJunk V2 malware activity to Screening Serpens, an Iran-nexus espionage group also known as UNC1549, Smoke Sandstorm, and Iranian Dream Job. According to Unit 42’s research, the campaigns targeted entities in the United States, Israel, and the United Arab Emirates, with likely additional targeting in the Middle […] The post MiniUpdate RAT uses Azure-hosted C2 domains in Iran-linked espionage campaigns appeared first on VPN Central.

Discussion in the ATmosphere

Loading comments...