Iran intelligence backdoored US bank, airport, software outfit networks

**Summary:** Security researchers attribute a cross-border intrusion campaign to the Iranian-affiliated MuddyWater (Seedworm) group, finding persistent access in multiple US, Canadian, and Israeli organizations. Analysts uncovered two backdoors (Dindoor — a Deno-based backdoor — and a Python backdoor called Fakeset), observed attempted data exfiltration using Rclone to Wasabi, and tied activity to MuddyWater via reused code-signing certificates; the presence predating recent hostilities raises concern about potential pivot to disruptive operations.