Experts at FireEye uncovered a new massive phishing campaign conducted by TEMP.Zagros group targeting Asia and Middle East regions from January 2018 to March 2018. Iranian hackers are one of the most active in this period, according to FireEye experts. The group behind the campaign is known as MuddyWater, aka Muddy water, and according to the experts it is now adopting new tactics, techniques, and procedures. The campaign started on Jan. 23 involved a macro-based document that dropped a VBS file and an INI file containing a Base64 encoded PowerShell command.”]
Source: http://securityaffairs.co/wordpress/70453/hacking/temp-zagros-phishing.html