Another piece of cyber-espionage malware is circulating throughout the Middle East, according to CSO Online.

Kaspersky Labs reports the “Mahdi” virus records keystrokes, audio and screenshots from infected computers. The researchers believe the virus may have originated in Iran because the virus communicates with a server in Tehran.

The malware is distributed via “rogue emails” that use social engineering to trick victims into opening infected PowerPoint files.

The name Mahdi comes from a prominent, messianic figure in the Muslim faith, according to the website.

This story is part of Federal News Radio’s daily Cybersecurity Update. For more cybersecurity news, click here.

Copyright © 2025 Federal News Network. All rights reserved. This website is not intended for users located within the European Economic Area.