“Nomad Leopard” Spotted in the Wild: Cyber Espionage Campaign Targets Afghan Government

SEQRITE Labs uncovered a Nomad Leopard cyber-espionage campaign targeting Afghan government employees using spear-phishing with fake ministry documents; attackers deliver malware via ISO files containing malicious LNK shortcuts that launch executables disguised as images hosted on GitHub, and researchers connected the operator through reused online personas suggesting a regionally focused, low-to-moderate sophistication threat.