Iran Dupes US Military Contractors, Gov't Agencies in Years-Long Cyber Campaign

An Iranian state-sponsored APT conducted a sophisticated, multiyear spearphishing and social-engineering campaign (2016–2021) using a custom tool called "Dandelion" to compromise hundreds of thousands of employee email accounts across US government agencies (including Treasury and State) and private-sector organizations; four individuals were indicted but remain at large and the full extent of data theft is unclear.