APT35 FORGES RECRUITMENT SITES, LAUNCHES ATTACKS ON AEROSPACE AND SEMICONDUCTOR INDUSTRIES IN MULTIPLE COUNTRIES

Summary from the TLDR InfoSec newsletter

APT35, a threat group linked to Iran, is targeting aerospace and semiconductor industries in various countries using forged recruitment sites to lure victims into downloading malicious programs. The attackers utilize legitimate internet resources like OneDrive and Google Cloud to carry out their activities, making threat detection and protection tools essential for defense against these attacks. ThreatBook has identified key indicators of compromise (IOCs) related to this attack event to enhance threat intelligence detection and protection efforts.