MICROSOFT: HACKERS TARGET DEFENSE FIRMS WITH NEW FALSEFONT MALWARE

Summary from the TLDR InfoSec newsletter

Microsoft has warned that Iranian cyber-espionage group APT33 is using new backdoor malware called FalseFont to target defense contractors worldwide. FalseFont provides remote access to compromised systems and file transfer to its command-and-control (C2) servers. Microsoft has advised network defenders to reset credentials for accounts targeted in password spray attacks and reset any remote access options like RDP.