Python Backdoor Threat Analysis Following an AI Deepfake Impersonation Campaign

Reported 13 May 2026 by otx · Severity: medium

A sophisticated campaign linked to APT37 delivers Python-based backdoors through spear-phishing emails containing malicious LNK files disguised as legitimate documents. Attackers use themes including airline e-tickets, North Korea research invitations, and impersonation of defens