New Threat Actor WIP26 Targeting Telecom Service Providers in the Middle East

New Threat Actor WIP26 Targeting Telecom Service Providers in the Middle East. Intelligence gathering mission using public cloud infrastructure for malware delivery, data exfiltration, and C2. Precision targeting via WhatsApp messages with links to Dropbox archive files. Misuse of Microsoft 365 Mail, Azure, Google Firebase, and Dropbox. Threat actors evade detection using CMD365 and CMDEmber backdoors