Mirage Kitten targets Middle East and Africa region with new malware

Mirage Kitten (UNC1549) conducted targeted cyber-espionage against aerospace, aviation, defense, and telecommunications organizations across the Middle East, Africa, and Pakistan using spear-phishing and tailored lures; researchers identified a new Windows backdoor named NightLedger and two WebSocket tunneling tools (ArcBridge and BridgeHead) that provide covert proxying and operator-controlled tunneling, with multiple IoCs and victim telemetry included.