DIANNA Explains 4: Nimbus Manticore—Monstrous Malware

Nimbus Manticore is a highly obfuscated 64-bit Windows malware attributed to an Iranian-backed actor that uses encrypted/packed sections, dynamic component loading (including a suspicious DLL 'unbcl-new6.dll'), sandbox-evasion, RPC-based lateral movement, and privilege escalation to establish persistent, network-wide footholds; Deep Instinct was reportedly the only vendor on VirusTotal to detect it for a full week, underscoring weaknesses in endpoint- and sandbox-focused defenses.