Iran-Nexus Disseminates MarkiRAT Surveillance Tool

Reported 01 Jul 2026 by otx · Severity: medium

TAG-182, an Iran-nexus threat cluster, is conducting surveillance operations targeting Iranian citizens both domestically and abroad using MarkiRAT malware. The group distributes fake Android applications masquerading as VPN services and media players through social media platfor