Recently, the 360 ​​Threat Intelligence Center intercepted a sample of targeted attacks against Iraqi mobile operators (Korek Telecom). The operator is Iraq’s fastest-growing mobile company serving 18 provinces in Iraq, serving businesses, governments and individual users. The attack sample was delivered using a spear phishing email: the victim was induced to open the attached Office Word document and the malicious macro was enabled. 

https://ti.360.net/blog/articles/suspected-muddywater-apt-organization-latest-attack-activity-analysis-against-iraqi-mobile-operator-korek-telecom/