Iranian hacker group Lyceum has launched lately a cyber-attack against an internet service provider (ISP) in Morocco, according to the findings of Prevailion’s Adversarial Counterintelligence Team (PACT) and Accenture’s Cyber Threat (ACTI) group. The Iranian cyber espionage threat group Lyceum (also known under the names HEXANE & Spirlin) used a backdoor to bypass detection by security software. Active since 2017, Lyceum targets organizations in sectors of strategic national importance, including oil and gas organizations and telecommunications providers. According to ACTI/PACT team, Lyceum is likely to update its backdoors after the revelation of its cyber-attacks to stay ahead of defensive systems. During the past years, Morocco has warned against the destabilizing threats posed by Iran and its proxies in North Africa and the Middle East.

Source: The North Africa Journal November 12, 2021 21:41 UTC