Spoofed GlobalProtect Used to Deliver Unique WikiLoader Variant - https://unit42.paloaltonetworks.com/global-protect-vpn-spoof-distributes-wikiloader/ 

Head Mare: adventures of a unicorn in Russia and Belarus - https://securelist.com/head-mare-hacktivists/113555/ 

DarkCracks, 一个利用被黑GLPI, WORDPRESS站点充当中转的高级恶意载荷&升级框架 - https://blog.xlab.qianxin.com/uncovering_darkcracks_payload_delivery_framework_cn/#%E6%94%BB%E5%87%BB%E7%9B%AE%E6%A0%87 

Iran’s Hacker Hierarchy Exposed - https://www.recordedfuture.com/blog/iran-hacker-hierarchy 

Iranian State-Sponsored Hackers Have Become Access Brokers for Ransomware Gangsca - https://cyble.com/blog/iranian-state-sponsored-hackers-have-become-access-brokers-for-ransomware-gangsca/