New Threat: Peach Sandstorm’s Tickler Malware

Emerging Threat: Peach Sandstorm's Tickler Malware

April to July 2024 was marked by the emergence of a significant cyber threat. Microsoft observed Peach Sandstorm, an Iranian state-sponsored group, deploying a fresh cyber weapon named Tickler. This multi-stage backdoor was aimed at critical sectors like satellite, communications, oil and gas, and governmental agencies in the United States and the United Arab Emirates. This activity aligns with Peach Sandstorm's ongoing mission of intelligence gathering.