GUEST RESEARCH: New research from Secureworks Counter Threat Unit (CTU) has exposed the inner workings of a new custom malware, Drokbk. The malware is associated with a subgroup of Iranian Cobalt Mirage – known as Cluster B – which is thought to be sponsored by the Islamic Revolutionary Guard Corps (IRGC), a branch of the Iranian Armed Forces.