Government entities and educational institutions in the Middle East are under attack in an ongoing credential-harvesting campaign.

Adversaries are using the SMB communications channel to launch template injection attacks against the energy sector, including nuclear facilities.