Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT ‘Boggy Serpens’

Unit 42 reports that Boggy Serpens, an Iranian nation-state actor, has matured from noisy phishing to stealthy, multi-wave campaigns against energy, maritime, and financial targets by hijacking legitimate mailboxes to bypass reputation filters and deploying Rust-based backdoors (Nuso, BlackBeard, LampoRAT) and AI-assisted tooling; defenders are advised to focus on behavioral monitoring and strict macro execution controls.