Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7) +--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445) +---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89) +---- Thread: Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks (/showthread.php?tid=6314621)

Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks - Stanley - Nov 27, 2025 Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks Suspected espionage-driven threat actors from Iran have been observed deploying backdoors like TWOSTROKE and DEEPROOT as part of continued attacks aimed at aerospace, aviation, and defense industries in the Middle East. The activity has been attributed by Google-owned Mandiant to a threat cluster tracked as UNC1549 (aka GalaxyGato, Nimbus Manticore, or Subtle Snail), which was first documented https://thehackernews.com/2025/11/iranian-hackers-use-deeproot-and.html