Iranian-linked group TA456, associated with the Iranian Revolutionary Guard, developed fake profile of an aerobics instructor named Marcella Flores to lure victims into downloading malware. The first signs of the fake Marcella s profile on social media started in 2018, according to a new report by Proofpoint. The group used the profile to slowly build a relationship with someone who worked for an aerospace defense contractor in the U.S. The malware is a new iteration of the Liderc malware.
Source: https://threatpost.com/iranian-apt-defense-contractor-catfish/168332/