Skip to content
NewA calmer, faster ZeroHour
Data breachhighExploited in the wild

Iran-Linked DarkBlinders Hackers Breach Iraq Government Cloud and Steal 1GB Data

Original title: Iran-Linked DarkBlinders Hackers Breach Government Cloud Systems and Steal Over 1GB of Data

Cyber Security Newsby Tushar Subhra Dutta ()4 min read1
Read at cybersecuritynews.com
Part of a story covered by 3 sourcesDarkBlinders Compromises Israeli Security Professional and Iraqi Kurdistan CloudMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The group stole at least 1 GB of data from a Kurdistan Region government cloud system and compromised a high-profile Israeli security sector professional.

An Iran-linked hacking group called DarkBlinders breached a government cloud system in the Kurdistan Region of Iraq and stole at least 1 GB of data. The group also compromised a high-profile person in Israel who works in the security sector. The campaign ran from August to October 2026 and remained active when reported. Lures included fake login pages impersonating Kuwait Ministry of Foreign Affairs and Gulf Cooperation Council, Google Drive sharing links, and a decoy StarkMeet video-meeting app.

Unconfirmed: Link to UNC5795 and APT34 is with medium-to-high confidence; signs of Iranian link are real but limited

Key facts
  • Fake login pages collected usernames and passwords from Kuwait Ministry of Foreign Affairs and Gulf Cooperation Council
  • StarkMeet decoy app delivered hidden backdoor
  • Backdoor uploaded computer details to GitHub and ran PowerShell commands to steal 1GB data
  • Dream links DarkBlinders to UNC5795 and APT34 with medium-to-high confidence
Security assessment · AI, from the articleExploited in the wild

Impact: Theft of at least 1GB data from government cloud system and compromise of high-profile Israeli security sector person

What to do
  1. 1.Monitor for Iranian hacking groups
  2. 2.Check for fake login pages and decoy meeting apps
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1566 Phishing
Tags
irandarkblindersdata-breachgovernment-cloud
Threat actors
DarkBlindersUNC5795APT34
Victims
Kurdistan Regional GovernmentIsraeli security professional
Countries
IranIraqIsrael

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domaincdndrive.onlineebsite StarkMeet decoy and download Domain drive-g[.]cloud, cdndrive[.]online, cdn-gdrive[.]cloud, drive-go[.]cam Drive-style delivery
domaincdn-gdrive.cloudcoy and download Domain drive-g[.]cloud, cdndrive[.]online, cdn-gdrive[.]cloud, drive-go[.]cam Drive-style delivery Domain meetgooge[.]o
domaindrive-g.cloude, stark-meet[.]website StarkMeet decoy and download Domain drive-g[.]cloud, cdndrive[.]online, cdn-gdrive[.]cloud, drive-go[.]cam Dr
domaindrive-go.camain drive-g[.]cloud, cdndrive[.]online, cdn-gdrive[.]cloud, drive-go[.]cam Drive-style delivery Domain meetgooge[.]online, meetgooge
domaingcc-sg.cloudndicators of compromise (IoCs):- Type Indicator Role Domain gcc-sg[.]cloud, gcc-sg[.]online GCC webmail lures Domain mfakuwait[.]org
domaingcc-sg.onlinepromise (IoCs):- Type Indicator Role Domain gcc-sg[.]cloud, gcc-sg[.]online GCC webmail lures Domain mfakuwait[.]org, mfakuwait[.]onl
domainkorektell.comAffairs lures Domain krgcloud[.]online, moelcloud[.]online, korektell[.]com Kurdistan-themed lures Domain starkmeet[.]com, stark-meet
domainkrgcloud.onlinete, mofakuwait[.]online Kuwait Foreign Affairs lures Domain krgcloud[.]online, moelcloud[.]online, korektell[.]com Kurdistan-themed lur
domainmeet-goo.cam-style delivery Domain meetgooge[.]online, meetgooge[.]cam, meet-goo[.]cam, meetonline[.]cam Meeting lures Domain g-prx.itugegape524
domainmeetgooge.camve-go[.]cam Drive-style delivery Domain meetgooge[.]online, meetgooge[.]cam, meet-goo[.]cam, meetonline[.]cam Meeting lures Domain g-
domainmeetgooge.online-gdrive[.]cloud, drive-go[.]cam Drive-style delivery Domain meetgooge[.]online, meetgooge[.]cam, meet-goo[.]cam, meetonline[.]cam Meetin
domainmeetonline.camDomain meetgooge[.]online, meetgooge[.]cam, meet-goo[.]cam, meetonline[.]cam Meeting lures Domain g-prx.itugegape524.workers[.]dev Clo
domainmfakuwait.online, gcc-sg[.]online GCC webmail lures Domain mfakuwait[.]org, mfakuwait[.]online, mfakuwait[.]website, mofakuwait[.]online Kuwait Foreign
domainmfakuwait.orgin gcc-sg[.]cloud, gcc-sg[.]online GCC webmail lures Domain mfakuwait[.]org, mfakuwait[.]online, mfakuwait[.]website, mofakuwait[.]on
domainmfakuwait.websiteC webmail lures Domain mfakuwait[.]org, mfakuwait[.]online, mfakuwait[.]website, mofakuwait[.]online Kuwait Foreign Affairs lures Domain
domainmoelcloud.onlineline Kuwait Foreign Affairs lures Domain krgcloud[.]online, moelcloud[.]online, korektell[.]com Kurdistan-themed lures Domain starkmeet[
domainmofakuwait.onlinen mfakuwait[.]org, mfakuwait[.]online, mfakuwait[.]website, mofakuwait[.]online Kuwait Foreign Affairs lures Domain krgcloud[.]online, mo
domainstark-meet.comektell[.]com Kurdistan-themed lures Domain starkmeet[.]com, stark-meet[.]com, stark-meet[.]online, stark-meet[.]website StarkMeet deco
domainstarkmeet.comoud[.]online, korektell[.]com Kurdistan-themed lures Domain starkmeet[.]com, stark-meet[.]com, stark-meet[.]online, stark-meet[.]webs
domainstark-meet.onlinestan-themed lures Domain starkmeet[.]com, stark-meet[.]com, stark-meet[.]online, stark-meet[.]website StarkMeet decoy and download Domain
domainstark-meet.websiteain starkmeet[.]com, stark-meet[.]com, stark-meet[.]online, stark-meet[.]website StarkMeet decoy and download Domain drive-g[.]cloud, cdnd
ipv4194.62.249.114]com/repos/PeakyBlindersTeam/myCode C2 (tasking) URL hxxp://194.62.249[.]114/8001 Direct service IP 194.62.249[.]19, 194.62.249[.]114,
ipv4194.62.249.19tasking) URL hxxp://194.62.249[.]114/8001 Direct service IP 194.62.249[.]19, 194.62.249[.]114, 194.62.249[.]53 UK hosting IP 89.125.2
ipv4194.62.249.534/8001 Direct service IP 194.62.249[.]19, 194.62.249[.]114, 194.62.249[.]53 UK hosting IP 89.125.209[.]80, 78.17.71[.]148 Netherlands
ipv477.223.215.140g IP 89.125.209[.]80, 78.17.71[.]148 Netherlands hosting IP 77.223.215[.]140 Germany hosting SHA-256 53f35e49eb9b271fd8cbcd3daacb52532
ipv478.17.71.1482.249[.]114, 194.62.249[.]53 UK hosting IP 89.125.209[.]80, 78.17.71[.]148 Netherlands hosting IP 77.223.215[.]140 Germany hosting S
ipv489.125.209.802.249[.]19, 194.62.249[.]114, 194.62.249[.]53 UK hosting IP 89.125.209[.]80, 78.17.71[.]148 Netherlands hosting IP 77.223.215[.]140 G
md5482c32947763a613199c43f7b4760f33f3e587da90be6020e2337c83e HTML page for StarkMeet brand MD5 482c32947763a613199c43f7b4760f33 Listed without file context SHA-256 052702d652286482863a70e
sha256052702d652286482863a70eaa37e4fc894f40c8b08dccf245ced46916e7f419f763a613199c43f7b4760f33 Listed without file context SHA-256 052702d652286482863a70eaa37e4fc894f40c8b08dccf245ced46916e7f419f Dubai Airport lure executable SHA-256 06d68dcb8088546cb40fb
sha25606d68dcb8088546cb40fb3d7e87d6a593cbdf4cc1e43017604faf786ad6dbd41ccf245ced46916e7f419f Dubai Airport lure executable SHA-256 06d68dcb8088546cb40fb3d7e87d6a593cbdf4cc1e43017604faf786ad6dbd41 Malicious .NET payload SHA-256 6e7d9b33f1e72ea1ede71373a604
sha2560702d54b03bf601019b6ad039f76ecc49b5b3e564119dfd60aebd742c8e90300ashes for build artifacts and lure-project files. They are: 0702d54b03bf601019b6ad039f76ecc49b5b3e564119dfd60aebd742c8e90300, 13216e9942e15a48228005092f4e5ff8b7382d4ec73673f88c6d7b6c10
sha2560c9869b4aa7dde55936ab8726c442368b722eb69b785ef5c8e24938a01fdee896b4407bdb0caa51dc5 Signed host repurposed by loader SHA-256 0c9869b4aa7dde55936ab8726c442368b722eb69b785ef5c8e24938a01fdee89 Loader configuration SHA-256 85c119297f42f09f9414e138b8f137
sha25611d1d570b5db7639d56a40621045e96c33b3d1ec3ae49e63c2ff07b9865844d4857c2bbd86c388d7b4e10f11b0e8 Kuwait credential page SHA-256 11d1d570b5db7639d56a40621045e96c33b3d1ec3ae49e63c2ff07b9865844d4 StarkMeet installer variant SHA-256 9ceb74f9ca2b0e9e1f0e579
sha25613216e9942e15a48228005092f4e5ff8b7382d4ec73673f88c6d7b6c103cbce04b03bf601019b6ad039f76ecc49b5b3e564119dfd60aebd742c8e90300, 13216e9942e15a48228005092f4e5ff8b7382d4ec73673f88c6d7b6c103cbce0, 1421fc1d0c06bf410b16f2cc44d49988c30cd64edf4dd08dd23ac64b28
sha2561421fc1d0c06bf410b16f2cc44d49988c30cd64edf4dd08dd23ac64b28b5c6419942e15a48228005092f4e5ff8b7382d4ec73673f88c6d7b6c103cbce0, 1421fc1d0c06bf410b16f2cc44d49988c30cd64edf4dd08dd23ac64b28b5c641, 1d1754948c42a85f4b613dfe3de8cfb100d334da956244e4b58f5ea9d6
sha2561d1754948c42a85f4b613dfe3de8cfb100d334da956244e4b58f5ea9d6463fed1d0c06bf410b16f2cc44d49988c30cd64edf4dd08dd23ac64b28b5c641, 1d1754948c42a85f4b613dfe3de8cfb100d334da956244e4b58f5ea9d6463fed, 22beddd7fd5d6df6104fc4987ca892b6772c2b832ad31731f71d4de2e9
sha25622beddd7fd5d6df6104fc4987ca892b6772c2b832ad31731f71d4de2e9d32c2b948c42a85f4b613dfe3de8cfb100d334da956244e4b58f5ea9d6463fed, 22beddd7fd5d6df6104fc4987ca892b6772c2b832ad31731f71d4de2e9d32c2b, 6ec2c97eeddf741a2f8dcd7b4c720c7f5a3f7afe5205ca1cf1e62d9199
sha25639da663f083fad0ad8dcaac90b0760d166e2aa911f90a3c311a8121badc16020217816a88ba35ec9a381f4 StarkMeet executable variant SHA-256 39da663f083fad0ad8dcaac90b0760d166e2aa911f90a3c311a8121badc16020 StarkMeet uninstaller SHA-256 3ab16d953c71738788ef2f39b62cf
sha2563ab16d953c71738788ef2f39b62cf47284750e98aada273187954536e1ee1c832aa911f90a3c311a8121badc16020 StarkMeet uninstaller SHA-256 3ab16d953c71738788ef2f39b62cf47284750e98aada273187954536e1ee1c83 Shortcut launching hidden component SHA-256 8875a41ead3b17e
sha2563f1961c951c105f289e64a8933c7d1ee34d71f1964999c01e97f2d944dfdc33c70a57ac5dc4be9b22ad28e Kuwait Outlook phishing page SHA-256 3f1961c951c105f289e64a8933c7d1ee34d71f1964999c01e97f2d944dfdc33c Kuwait HTML phishing document SHA-256 3fde5576233852cb9fdc0
sha2563f76edab26d08b1517a15bde8ca82e94d48b4cbedd005eb11c950cfd6d9a8982ff9b8cda616b1c4a74236b9 StarkMeet installer variant SHA-256 3f76edab26d08b1517a15bde8ca82e94d48b4cbedd005eb11c950cfd6d9a8982 Packed StarkMeet variant SHA-256 87bd8af14932f132bb3df9a6b8
sha2563fd810a3aa0039993393741b32287c367a9a5037a41e826906440887cdd3ed13dbf159a03dbd1c7adebe0363daa402 RuntimeBroker loader SHA-256 3fd810a3aa0039993393741b32287c367a9a5037a41e826906440887cdd3ed13 PowerShell helper SHA-256 824b36b9af74655a2c53b73959c144028
sha2563fde5576233852cb9fdc0d6c2c4956a8eaa0857c2bbd86c388d7b4e10f11b0e899c01e97f2d944dfdc33c Kuwait HTML phishing document SHA-256 3fde5576233852cb9fdc0d6c2c4956a8eaa0857c2bbd86c388d7b4e10f11b0e8 Kuwait credential page SHA-256 11d1d570b5db7639d56a40621045
sha256415eb0d0055bc113df2da361b35c4de65ff55d5cddea3b637660b3ad19848ebde2dac1ee56fb6ae79c4c5044bc87bd80 JSON configuration SHA-256 415eb0d0055bc113df2da361b35c4de65ff55d5cddea3b637660b3ad19848ebd Credential phishing page SHA-256 48e6a4196bff405b8b8ef80dcb
sha25648e6a4196bff405b8b8ef80dcba599b93cb0428f3e587da90be6020e2337c83e5cddea3b637660b3ad19848ebd Credential phishing page SHA-256 48e6a4196bff405b8b8ef80dcba599b93cb0428f3e587da90be6020e2337c83e HTML page for StarkMeet brand MD5 482c32947763a613199c43f7b
sha25653f35e49eb9b271fd8cbcd3daacb525328dbf159a03dbd1c7adebe0363daa402erlands hosting IP 77.223.215[.]140 Germany hosting SHA-256 53f35e49eb9b271fd8cbcd3daacb525328dbf159a03dbd1c7adebe0363daa402 RuntimeBroker loader SHA-256 3fd810a3aa0039993393741b32287c
sha2566e7d9b33f1e72ea1ede71373a604ecdb060dab7d42055179c1eede9ecd1fd239f4cc1e43017604faf786ad6dbd41 Malicious .NET payload SHA-256 6e7d9b33f1e72ea1ede71373a604ecdb060dab7d42055179c1eede9ecd1fd239 Dubai Airport lure archive SHA-256 f5b12772db6817f7a765a6fe
sha2566ec2c97eeddf741a2f8dcd7b4c720c7f5a3f7afe5205ca1cf1e62d9199333e4bd7fd5d6df6104fc4987ca892b6772c2b832ad31731f71d4de2e9d32c2b, 6ec2c97eeddf741a2f8dcd7b4c720c7f5a3f7afe5205ca1cf1e62d9199333e4b, 9d4b61dae9e00940305c6ad7d862713025c07f27ecb5f89e59bcbd3fbc
sha256770646093df203013b190ef0b0baa9dd2f6834534970a57ac5dc4be9b22ad28e6278d35a95c6d9b789ac0bfd StarkMeet delivery archive SHA-256 770646093df203013b190ef0b0baa9dd2f6834534970a57ac5dc4be9b22ad28e Kuwait Outlook phishing page SHA-256 3f1961c951c105f289e64a
sha256824b36b9af74655a2c53b73959c144028b1f8ccc7c45ef17455d020b74cd0a5167a9a5037a41e826906440887cdd3ed13 PowerShell helper SHA-256 824b36b9af74655a2c53b73959c144028b1f8ccc7c45ef17455d020b74cd0a51 StarkMeet decoy executable SHA-256 8c68119ebef2ec4be1d57f86
sha25685c119297f42f09f9414e138b8f137a3e2dac1ee56fb6ae79c4c5044bc87bd8022eb69b785ef5c8e24938a01fdee89 Loader configuration SHA-256 85c119297f42f09f9414e138b8f137a3e2dac1ee56fb6ae79c4c5044bc87bd80 JSON configuration SHA-256 415eb0d0055bc113df2da361b35c4de6
sha25687bd8af14932f132bb3df9a6b8c17748c3e114432e217816a88ba35ec9a381f4bedd005eb11c950cfd6d9a8982 Packed StarkMeet variant SHA-256 87bd8af14932f132bb3df9a6b8c17748c3e114432e217816a88ba35ec9a381f4 StarkMeet executable variant SHA-256 39da663f083fad0ad8dcaa
sha2568875a41ead3b17eb8538466bfecb211a52d7ee56fa6e496b4407bdb0caa51dc57954536e1ee1c83 Shortcut launching hidden component SHA-256 8875a41ead3b17eb8538466bfecb211a52d7ee56fa6e496b4407bdb0caa51dc5 Signed host repurposed by loader SHA-256 0c9869b4aa7dde5593
sha2568c68119ebef2ec4be1d57f867ecc1e3606f819bd6278d35a95c6d9b789ac0bfd7c45ef17455d020b74cd0a51 StarkMeet decoy executable SHA-256 8c68119ebef2ec4be1d57f867ecc1e3606f819bd6278d35a95c6d9b789ac0bfd StarkMeet delivery archive SHA-256 770646093df203013b190ef0
sha2569ceb74f9ca2b0e9e1f0e579bfbb5d3d376667165eff9b8cda616b1c4a74236b9ae49e63c2ff07b9865844d4 StarkMeet installer variant SHA-256 9ceb74f9ca2b0e9e1f0e579bfbb5d3d376667165eff9b8cda616b1c4a74236b9 StarkMeet installer variant SHA-256 3f76edab26d08b1517a15bd
sha2569d4b61dae9e00940305c6ad7d862713025c07f27ecb5f89e59bcbd3fbcf179657eeddf741a2f8dcd7b4c720c7f5a3f7afe5205ca1cf1e62d9199333e4b, 9d4b61dae9e00940305c6ad7d862713025c07f27ecb5f89e59bcbd3fbcf17965, 9d84672c95bfa4f2a3756053d21fd3b72508f51c7856837bd489f5edf2
sha2569d84672c95bfa4f2a3756053d21fd3b72508f51c7856837bd489f5edf283be10dae9e00940305c6ad7d862713025c07f27ecb5f89e59bcbd3fbcf17965, 9d84672c95bfa4f2a3756053d21fd3b72508f51c7856837bd489f5edf283be10, aa7d4bf74edacba06da7e9d414c0649599fb0e7b118f7c3ddcec09eb3f
sha256aa7d4bf74edacba06da7e9d414c0649599fb0e7b118f7c3ddcec09eb3f720c822c95bfa4f2a3756053d21fd3b72508f51c7856837bd489f5edf283be10, aa7d4bf74edacba06da7e9d414c0649599fb0e7b118f7c3ddcec09eb3f720c82, c9178fef804f2d6a525c1af0a8ba49a5ec692bfaabd6043e5f0094fe93
sha256aae2a7860f2e46019c38c1e7a50bc3b8f8104577acf750221c2cf23e6b376328ef804f2d6a525c1af0a8ba49a5ec692bfaabd6043e5f0094fe93a31e82, aae2a7860f2e46019c38c1e7a50bc3b8f8104577acf750221c2cf23e6b376328, ac91ba73040ed42fb4eda1459bb8098e2f80970f2028da80c4e2f01e28
sha256ac91ba73040ed42fb4eda1459bb8098e2f80970f2028da80c4e2f01e281cc223860f2e46019c38c1e7a50bc3b8f8104577acf750221c2cf23e6b376328, ac91ba73040ed42fb4eda1459bb8098e2f80970f2028da80c4e2f01e281cc223, b24a0c29134800dad72021e22d5ead99fa941722526807f29c131f6fbf
sha256b24a0c29134800dad72021e22d5ead99fa941722526807f29c131f6fbffa5fe273040ed42fb4eda1459bb8098e2f80970f2028da80c4e2f01e281cc223, b24a0c29134800dad72021e22d5ead99fa941722526807f29c131f6fbffa5fe2, c039da6d430f78fc2a405c8ae945d2114518a63d73857145bb244ab651
sha256c039da6d430f78fc2a405c8ae945d2114518a63d73857145bb244ab651e41f8429134800dad72021e22d5ead99fa941722526807f29c131f6fbffa5fe2, c039da6d430f78fc2a405c8ae945d2114518a63d73857145bb244ab651e41f84, d8a4d54808c4705f472222c8a6ac5fd0622eb9bda7a2f07e12d712ea8b
sha256c9178fef804f2d6a525c1af0a8ba49a5ec692bfaabd6043e5f0094fe93a31e82f74edacba06da7e9d414c0649599fb0e7b118f7c3ddcec09eb3f720c82, c9178fef804f2d6a525c1af0a8ba49a5ec692bfaabd6043e5f0094fe93a31e82, aae2a7860f2e46019c38c1e7a50bc3b8f8104577acf750221c2cf23e6b
sha256d8a4d54808c4705f472222c8a6ac5fd0622eb9bda7a2f07e12d712ea8b495d8e6d430f78fc2a405c8ae945d2114518a63d73857145bb244ab651e41f84, d8a4d54808c4705f472222c8a6ac5fd0622eb9bda7a2f07e12d712ea8b495d8e, dbd31b5d891d789e5cebbf0744a57b17c2f9a4fe50b79f64956e40dbb5
sha256dbd31b5d891d789e5cebbf0744a57b17c2f9a4fe50b79f64956e40dbb5fcaa9e4808c4705f472222c8a6ac5fd0622eb9bda7a2f07e12d712ea8b495d8e, dbd31b5d891d789e5cebbf0744a57b17c2f9a4fe50b79f64956e40dbb5fcaa9e, e325ba0f93dfdeeb8c35e159c54f9d4e796905056506f6d627f4d66f15
sha256e325ba0f93dfdeeb8c35e159c54f9d4e796905056506f6d627f4d66f15fb99885d891d789e5cebbf0744a57b17c2f9a4fe50b79f64956e40dbb5fcaa9e, e325ba0f93dfdeeb8c35e159c54f9d4e796905056506f6d627f4d66f15fb9988, f2c54434e2eecca203c2114c0651e5d7a90fc2681117240686d084f016
sha256f2c54434e2eecca203c2114c0651e5d7a90fc2681117240686d084f016f9e2b60f93dfdeeb8c35e159c54f9d4e796905056506f6d627f4d66f15fb9988, f2c54434e2eecca203c2114c0651e5d7a90fc2681117240686d084f016f9e2b6. Note: IP addresses and domains are intentionally Qdefanged
sha256f5b12772db6817f7a765a6fe7565fd3d4f87edc28e42fe3ec0244a372a410fc942055179c1eede9ecd1fd239 Dubai Airport lure archive SHA-256 f5b12772db6817f7a765a6fe7565fd3d4f87edc28e42fe3ec0244a372a410fc9 Weaponized project file The report lists more SHA-256 hashe
urlhttp://194.62.249.114/8001ithub[.]com/repos/PeakyBlindersTeam/myCode C2 (tasking) URL hxxp://194.62.249[.]114/8001 Direct service IP 194.62.249[.]19, 194.62.249[.]114, 194.
urlhttps://api.github.com/repos/PeakyBlindersTeam/myCodeb[.]com/repos/PeakyBlindersTeam/myLic C2 (registration) URL hxxps://api.github[.]com/repos/PeakyBlindersTeam/myCode C2 (tasking) URL hxxp://194.62.249[.]114/8001 Direct serv
urlhttps://api.github.com/repos/PeakyBlindersTeam/myLic-content/uploads/2025/08/StarkMeet.zip Payload delivery URL hxxps://api.github[.]com/repos/PeakyBlindersTeam/myLic C2 (registration) URL hxxps://api.github[.]com/repos/Peak
urlhttps://stark-meet.com/wp-content/uploads/2025/08/StarkMeet.zip-prx.itugegape524.workers[.]dev Cloudflare Worker proxy URL hxxps://stark-meet[.]com/wp-content/uploads/2025/08/StarkMeet.zip Payload delivery URL hxxps://api.github[.]com/repos/Peaky

From the original article

4 min read at cybersecuritynews.com

An Iran-linked hacking group called DarkBlinders has broken into a government cloud system in the Kurdistan Region of Iraq. The group stole at least 1 GB of data from it. It also compromised a high-profile person in Israel who works in the security sector.

Cyber Security News

By Tushar Subhra Dutta · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.