WildPressure__2020__WildPressure_targets_industrial-related_entities_in_the_Middle_East_Securelist.pdf

WildPressure is a targeted malware campaign in the Middle East deploying Milum, a C++ backdoor that uses JSON configuration, RC4 encryption, and HTTP-based C2; the operation appears aimed at industrial sectors, with multiple IoCs (hashes, URLs) and sinkholed C2 domains, and despite APT labeling, attribution to a known actor is not yet established.