Russian-based Kaspersky Lab and Israeli security firm Seculert have discovered a new malware infecting over 800 computers in Iran, as well as many other places. Mahdi, named after the the Muslim messiah, infects computers and then systematically vacuums up data files. While the labs are unsure whether Mahdi is the product of a nation-state, they do note that some strings of the malware are written in Farsi, as well as some dates written in Persian calendar format.
