TAMECAT - Analysis of an Iranian PowerShell-Based Backdoor

Iranian state-sponsored APT42 is deploying the modular PowerShell-based TAMECAT malware in highly targeted espionage campaigns against senior defense and government officials, leveraging advanced obfuscation, social engineering, and encrypted C2 channels to exfiltrate sensitive data.