RatMilad: Iranian Hackers Deploy Novel Spyware

Once thought to be a modus operandi of highly funded and well-trained nation state threat actors, the RatMilad malware shows that in today’s cybersecurity landscape, even small-time hacking groups now have access to relatively sophisticated spyware and prolific means of distribution. The public availability and use of social media shows that while this particular strain of malware has specific and intended targets, it also acts as a means of promoting the skills and talents of the hacking group itself. The proliferation of RatMilad is, in a way, an advertisement for what could become a customized malware that can be purchased through black-market means and used by anyone who has the need or desire to deploy malicious spyware. This is particularly concerning because it shows that as the business of malicious hacking of government and enterprise grows, so does the threat to average, consumer-level users, because the ease of use and distribution of sophisticated malware gives the threat a much wider footprint. The need for better and more advanced security measures is critical, as well as the need for the education of users to know how to safely use devices, and to be cautious of links and promotions received through social media and other untrusted sources. The safest thing to do is not to trust any unsolicited messages in social media, and to only get applications from trusted, licensed sources, such as those found on the Google Play store and the Apple App store. While smart devices are capable of making life more convenient, and giving us powerful tools at our fingertips, it is important to be vigilant in using these devices wisely and safely.