Iran-Linked Threat Actors Deploy Dindoor Backdoor via Deno Runtime

Iran-linked MuddyWater actors are deploying a Windows backdoor called Dindoor that leverages the legitimate Deno runtime to run malicious JavaScript/TypeScript payloads, complicating detection; Dindoor has been observed as a later-stage payload in spearphishing campaigns targeting U.S. software companies, and organizations using Deno are advised to enhance monitoring.