threat-intel
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
High
Summary
This report from Palo Alto Unit 42 details ongoing espionage campaigns conducted by the Iran-nexus APT group Screening Serpens (UNC1549). The group, active since 2022, targeted entities in the U.S., Israel, the UAE, and potentially two additional Middle Eastern nations between February and April 2026, leveraging sophisticated social engineering tactics and deploying six new remote access trojan (RAT) variants. The campaigns utilized techniques like AppDomainManager hijacking to disable security mechanisms, increasing vulnerability to the RATs.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data