Nation-State Cyber Threats
Iran-Nexus APT Screening Serpens Hijacks .NET Apps to Disable Their Own Defenses
Palo Alto Networks' Unit 42 is tracking Screening Serpens, an Iran-nexus APT that fuses DLL sideloading with AppDomainManager hijacking to make .NET applications switch off their own security mechanisms, then deploys six new RATs across the U.S., Israel, and the UAE.