Chafer APT Takes Aim at Diplomats in Iran with Improved Custom Malware

[maruf.swe]

The Remexi spyware has been improved and retooled.

UPDATE

An Iran-linked APT known as Chafer has been spotted targeting various entities based in Iran with an enhanced version of a custom malware that takes a very unique approach to communication by using the Microsoft Background Intelligent Transfer Service (BITS) mechanism over HTTP.

For More Details : https://threatpost.com/chafer-iran-apt-malware/141420/