Tag: iran
-
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026.According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting…
-
TrendAI-Studie: So nutzen China, Russland, Nordkorea und Iran KI für Cyberangriffe
Staatliche Hacker nutzen KI für Spionage, Malware und Cyberangriffe. TrendAI zeigt, wie China, Russland, Nordkorea und Iran ihre Strategien verändern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/trendai-studie-so-nutzen-china-russland-nordkorea-und-iran-ki-fuer-cyberangriffe/a46915/
-
Iranian Hacking Group Found Hosting C2 Infrastructure in the US
Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/iranian-hacking-group-hosting-c2/
-
X Removes 13,000 Fake Accounts Ahead of US Midterm Elections
X has suspended more than 13,000 accounts tied to three suspected foreign influence operations linked to Iran, Russia, and China. With the US midterms approaching, the platform said the fake X accounts were trying to shape political debate in the United States. The crackdown came one week after OpenAI announced it had disrupted two similar…
-
OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPT
A Latin American propaganda operation run by Russians and a cluster of Iranian fake journalist identities each had help from now-closed ChatGPT accounts, OpenAI’s safety team said. First seen on therecord.media Jump to article: therecord.media/openai-disrupts-russian-iranian-operations-chatgpt
-
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
The two campaigns were rated 4 and 5 out of 6 for severity, the first time OpenAI has reported what it considers a high-impact influence campaigns. First seen on cyberscoop.com Jump to article: cyberscoop.com/openai-disrupts-russia-iran-ai-influence-operations/
-
Hackers Pose as Dubai Airports Recruiters to Infect Software Engineers With ShelbyLoader V2
An Iranian state-aligned threat actor impersonated Dubai Airports recruiters to deliver weaponized coding assessments to software engineers. The operation deployed ShelbyLoader V2 through a stealthy execution chain that abused legitimate Microsoft development tools and GitHub infrastructure. Tracked as CL-STA-1178, the activity includes “Blinder Tunnel,” a campaign targeting Iraqi critical infrastructure beginning in March 2026. The…
-
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities. Amir Barati spent June 25 getting arrested in Montenegro, and this week a Montenegrin court signed off on sending him to the United States. He’s a dual Turkish and Iranian citizen, 40 years old,…
-
Iranian accused of hacking American universities extradited from Montenegro
An Iranian national accused by the U.S. of taking part in dozens of breaches involving the theft of academic data and intellectual property has been extradited from Montenegro. First seen on therecord.media Jump to article: therecord.media/iran-montenegro-hacker-extradition
-
UAE Resists Onslaught of Iranian Cyberattacks
Gulf Kingdoms Cite Information Sharing and Private Sector Support. The United Arab Emirates is weathering a hacking onslaught from across the Persian Gulf thanks to internal resilience buttressed by partnerships with allies and hyperscalers, government officials told an international audience at the massive GISEC Global cybersecurity conference in Dubai this month. First seen on govinfosecurity.com…
-
Cryptohack Roundup: US Sanctions BitBank
Also: South Korea Books 26 Polymarket Users for Alleged Illegal Gambling. This week, the United States sanctioned Iranian exchange BitBank, South Korea booked 26 Polymarket users and Polymarket faced $10 million fraud attempt. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-us-sanctions-bitbank-a-32914
-
3 Cyber Threats That Defined the Summer of 2026
This installment of the Reporters’ Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife’s ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/3-cyber-threats-defined-summer-2026
-
AI Hallucinations Nearly Triggered a US-China Military Confrontation
An AI-generated intelligence report falsely identified weapons on a Chinese ship, nearly triggering a US military operation during the Iran war. According to CNN, four sources familiar with the episode say an intelligence report circulated through the military claiming a Chinese vessel in the Middle East was carrying components for a nuclear weapons program. The…
-
InfoguardIntelligence-Report Cyberrisiko Iran
Staatliche Akteure etablieren sich langfristig in Netzen, OT- und Edge-Systeme gewinnen als Angriffsziele an Bedeutung und KI beschleunigt Angriffsketten. Der Iran ist zudem gegenwärtig eine akute Bedrohung, die häufig unter dem Radar fliegt. Das sind die zentralen Erkenntnisse des aktuellen Infoguard-Threat-Reports Q3/26. Unternehmen müssen angesichts dieser Lage ihre Cyberresilienz stärken, um exponierte Systeme frühzeitig zu…
-
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
The Iran-linked “hacktivist” persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE.”HEAVYGRAM offers builtin commands supporting remote command execution, system, network and process information discovery, data and Telegram session files exfiltration, screenshot capture, DLL sideloading, First seen on thehackernews.com Jump to article:…
-
Congress eyes new support for Cyber Command after recent suicide deaths
Congressional sources say they view the deaths of U.S. Cyber Command personnel as an inflection point, especially as the Pentagon’s appetite for cyber capabilities grows following successful contributions to high-profile missions against Iran and Venezuela. First seen on therecord.media Jump to article: therecord.media/congress-eyes-support-for-cyber-command-suicide-deaths
-
Iranian strikes on AWS facilities left customer data beyond recovery in Bahrain, UAE
Six months after Iranian drone strikes tore through its Middle East infrastructure, Amazon Web Services (AWS) has acknowledged the permanent loss of customer data in Bahrain … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/17/aws-middle-east-outage-permanent-data-loss-bahrain-uae/
-
Fake MRI Scans Deliver CHOSEN BRICK Spyware to Windows PCs
Iranian state-linked attackers are using fake MRI scans and software lures to deploy CHOSEN BRICK spyware on Windows PCs. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-chosen-brick-spyware-windows/
-
America’s cyber strategy overlooks the infrastructure that actually keeps the military moving
Ports, railroads, and utilities keep the military operational. They’re all vulnerable to Iranian cyberattacks. First seen on cyberscoop.com Jump to article: cyberscoop.com/us-cyber-strategy-iranian-threats-infrastructure-op-ed/
-
Chosen Brick, Iran’s Surveillance Malware
UK, US, and Dutch agencies expose Chosen Brick, Iranian malware used to track and harass dissidents, journalists, and activists via Telegram. The UK, the US, and the Netherlands published a joint advisory warning about a Windows malware family, dubbed Chosen Brick, that Iran’s intelligence services use to track down dissidents, journalists, and activists, and the…
-
Chosen Brick, Iran’s Surveillance Malware
UK, US, and Dutch agencies expose Chosen Brick, Iranian malware used to track and harass dissidents, journalists, and activists via Telegram. The UK, the US, and the Netherlands published a joint advisory warning about a Windows malware family, dubbed Chosen Brick, that Iran’s intelligence services use to track down dissidents, journalists, and activists, and the…
-
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/
-
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/
-
US Boarded 2 Oil Tankers to Investigate Cyberattacks
Foreign Tankers Were Bound for Texas When Networks Were Compromised. The Coast Guard and FBI boarded two foreign oil tankers bound toward Texas after signs their networks were compromised, inspecting IT and operational systems as authorities examined possible links to the broader U.S.-Iran conflict. There are no reports of operational disruptions, the FBI said. First…
-
Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists
Iranian state cyber actors are deploying malware called CHOSEN BRICK against individuals they see as a threat to the regime, reaching victims through social messaging apps and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/16/iranian-hackers-chosen-brick-malware-dissidents-journalists/
-
UK, US and Netherlands warn of Iranian state spyware campaign
Cyber attackers linked to Iran’s Ministry of Intelligence and Security are targeting opponents and opposition groups with Windows spyware First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650300/UK-US-and-Netherlands-warn-over-Iranian-state-spyware-campaign
-
NCSC and Allies Warn of Iranian Spyware Campaign
The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/
-
NCSC and Allies Warn of Iranian Spyware Campaign
The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/
-
NCSC and Allies Warn of Iranian Spyware Campaign
The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/