Nyotron says it has spotted a threat actor with likely links to Saudi Arabia, Iran, or Algeria using a repurposed malware tool to target specific critical infrastructure organizations in the Middle East. The tool is based on H-Worm aka Houdini, a four-year-old remote access trojan (RAT) believed to be the work of an Algerian hacker. The main goals of the malware tool appear to be data theft for the purposes of conducting reconnaissance on critical infrastructure targets.”]