APT42 Expands AI-Assisted Phishing Operations Targeting Government Officials

Iran-linked APT42 has intensified espionage against high-profile government and defense targets by using AI-assisted phishing personas and advanced social engineering; the group deployed an upgraded TAMECAT backdoor focused on long-term access to sensitive identities and leveraged cloud abuse and fileless PowerShell techniques. Reports indicate the campaign is ongoing and poses a sophisticated, persistent threat to targeted individuals and organizations.