Cyber Espionage, new Iranian APT uses MSHTML RCE to steal Google-Instagram credentials Safe Breach Labs cybersecurity experts: The threat actor infects victims via Farsi phishing emails with… Cyber Espionage, new Iranian APT uses MSHTML RCE to steal Google-Instagram credentials 29 November 2021 Francesco Bussoletti Cyber, Defence and Security Safe Breach Labs cybersecurity experts: The threat actor infects victims via Farsi phishing emails with a PowerShell stealer malware.