US EditionIran-aligned BladedFeline spies on Iraqi and Kurdish officials, ESET Research discovers
8 Articles
8 Articles
Iran-aligned BladedFeline spies on Iraqi and Kurdish officials, ESET Research discovers
ESET researchers have revealed that Iran-aligned threat group BladedFeline targeted Kurdish and Iraqi government officials with array of malicious tools discovered within their systems.ESET discovered and analyzed two reverse tunnels (Laret and Pinar), a backdoor (Whisper), a malicious IIS module…
Global Security Mag Online
Global Security Mag OnlineAccording to ESET researchers, the BladedFeline cyber-threats group, aligned with Iran, conducted a cyber-espionage campaign targeting representatives of the Kurdish and Iraqi governments. This operation reveals an arsenal of sophisticated malicious tools deployed on compromised systems, including two tunneling tools (Laret and Pinar), a custom stealth door called Whisper and a malicious IIS module named PrimeCache, all identified by ESET. Whisp…
Error code 521 means that Cloudflare failed to receive a response from the origin server. Common causes include an overloaded origin server, misconfiguration, or network issues. It is recommended to check the origin server status, firewall settings, and network connectivity to resolve the issue.
Iran-linked hackers target Kurdish and Iraqi officials in long-running cyberespionage campaign
The group has been operating since at least 2017, initially breaching systems belonging to the Kurdistan Regional Government and have expanded their reach to the Central Government of Iraq as well as a telecommunications provider in Uzbekistan.
Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware
An Iran-aligned hacking group has been attributed to a new set of cyber attacks targeting Kurdish and Iraqi government officials in early 2024. The activity is tied to a threat group ESET tracks as BladedFeline, which is assessed with medium confidence to be a sub-cluster within OilRig, a known Iranian nation-state cyber actor. It's said to be active since September 2017, when it targeted
Coverage Details
Bias Distribution
- 67% of the sources lean Left
To view factuality data please Upgrade to Premium
Ownership
To view ownership data please Upgrade to Vantage
