misp-galaxy:tool="Iron Backdoor",tlp:white,circl:incident-classification="cryptojacking",enisa:nefarious-activity-abuse="ransomware",osint:source-type="blog-post",estimative-language:confidence-in-analytic-judgment="moderate",misp-galaxy:threat-actor="Iron Group"