Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #10

Iran-aligned hackers target Israeli firm and Kurdish government cloud

Original: 🤖 Iran-aligned DarkBlinders hit a high-profile Israeli target and a Kurdish government cloud (Aug–Oct 2026). Chain: fake

Iran-aligned hacking group DarkBlinders reportedly compromised a high-profile Israeli target and a Kurdish government cloud environment between August and October 2026. The attack chain allegedly used fake Dubai Airports recruiter contacts, a Visual Studio coding test delivering .csproj AppDomainManager injection, DLL sideloading, and the SHELBYLOADER v2 and SHELBYC2 tools with command-and-control traffic routed over GitHub.

Why now: The reported intrusion chain and its use of recruitment lures and GitHub infrastructure has drawn attention from the cybersecurity community.

DarkBlindersIranIsraelKurdish governmentDubai Airports

Open on mastodon →

Evidence

• 🤖 Iran-aligned DarkBlinders hit a high-profile Israeli target and a Kurdish government cloud (Aug–Oct 2026). Chain: fake Dubai Airports recruiters → Visual Studio "coding test" → .csproj AppDomainManager injection → DLL sideloading → SHELBYLOADER v2 → SHELBYC2, C2 over GitHub.… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4665156