Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

The Hacker News 26 August 2026, 18:35 EEST Security

Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the Islamic Revolutionary Guard Corps (IRGC). Group-IB, in a new analysis published today, described the cyber espionage actor as among the most active Iranian APT groups in 2026. Nimbus Manticore (aka…

Read the full story on The Hacker News https://thehackernews.com/2026/08/nimbus-manticore-expands-toolset-with.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Critical Avada WordPress theme flaw enables zero-click RCE BleepingComputer
New GPUThor attack defeats NVIDIA ECC protection for root access BleepingComputer
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations The Hacker News
Boston Scientific says cyberattack disrupted operations globally BleepingComputer