Desert Dexter Targets 900 Victims Using Facebook Ads and Telegram Malware Links

Summary: A new malware campaign targeting the Middle East and North Africa has been utilizing a modified version of AsyncRAT since September 2024, attributed to a threat actor known as Desert Dexter. The campaign exploits social media to distribute malware and has affected around 900 victims, primarily from various sectors in countries like Libya, Saudi Arabia, and Egypt. The malware compromises systems by using deceptive techniques to create a persistent presence and gather sensitive information.

Affected: Middle East and North Africa region

Keypoints :

• AsyncRAT variant modified to include offline keylogger and cryptocurrency monitoring.
• Malware is distributed via social media links to legit file-sharing services and Telegram channels.
• Victims predominantly from industries such as oil production, IT, and agriculture, indicating a broad impact.