Operation Molerats: Middle East Cyber Attacks Using Poison Ivy

FireEye analysis of "Operation Molerats" documents a targeted campaign leveraging Poison Ivy (PIVY) and other publicly available RATs against Middle Eastern (and some U.S.) targets using Arabic-themed decoys and spear-phishing; the report provides sample hashes, PIVY configurations and passwords, C2 domains and IPs, delivery methods (weaponized RARs and Dropbox links), forged Microsoft code-signing evidence, and a YARA rule to detect related signed binaries.