Skip to content
Threat Feed
Subscribe

Actor

Nimbus Manticore

2 briefs RSS
high threat

Nimbus Manticore Targets Developers with Node.js-based Cross-Platform RATs

The Iranian threat actor Nimbus Manticore is distributing NodeRabbit and PollCat cross-platform RATs via trojanized coding challenges on LinkedIn to compromise developer systems.

VS Code +1 Nimbus Manticore espionage rat phishing recruitment cross-platform
1r 3t 3i
high threat

Nimbus Manticore Resurfaces During Operation Epic Fury with New Techniques

Nimbus Manticore, an Iranian IRGC-affiliated threat actor, resurfaced during Operation Epic Fury, employing AppDomain Hijacking, SEO poisoning, and a new MiniFast backdoor while targeting the aviation and software sectors.

Setup.exe +3 Nimbus Manticore nimbus-manticore irgc appdomain-hijacking seo-poisoning minijunk minifast infostealer
2r 3t