Iranian Crambus Actors Modify Windows Firewall Rules To Enable Remote Access

The Crambus espionage group, formally known as OilRig or APT34, has a lengthy history and a great deal of experience conducting prolonged attacks against Iranian targets. The Iranian-linked attackers targeted a Middle Eastern government between February and September 2023, compromising several computers and servers. According to Symantec, there is evidence that the attackers modified the Windows firewall […]

The post Iranian Crambus Actors Modify Windows Firewall Rules To Enable Remote Access appeared first on Cyber Security News.

access apt34 attackers attacks computers cyber-attack deal enable espionage experience february firewall firewall rules government great history iranian oilrig remote access rules september servers symantec windows