The Earth Simnavaz APT, a suspected Iranian state-sponsored threat actor, has been targeting organizations in the Gulf region using a backdoor in Microsoft Exchange servers. The backdoor allows the attackers to gain unauthorized access to sensitive information and potentially deploy ransomware. The attacks highlight the growing threat of nation-state actors targeting critical infrastructure and businesses.