CR4T Backdoor Campaign Targets Middle Eastern Government Entities

Threat actors targeted government organizations in the Middle East using a newly identified backdoor named CR4T. The campaign relied on phishing-based delivery methods to compromise victim systems and deploy the malware, which was designed to evade detection while providing persistent remote access. Once installed, CR4T enabled attackers to execute commands, collect system information, download additional payloads, and maintain long-term access to compromised hosts. The targeting of government entities and use of stealth-focused techniques indicate an espionage-motivated operation aimed at gathering sensitive information from public-sector organizations. The malware's design incorporated multiple evasion mechanisms intended to hinder analysis and detection.