CYBERSECURITYTRACKER
Permanent story citation

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12065

As cited

Copy frozen at (site build).

threat intel

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

An Iran state-aligned threat actor conducted a cyber espionage campaign between August and October 2026 targeting Israel and the Kurdistan Region of Iraq, compromising a high-profile individual in Israel and a government cloud environment. Dream Research Labs disclosed the campaign, attributed to a group tracked as DarkBlinders.

Why it matters: Government and diplomatic entities in Israel and Iraqi Kurdistan should assess whether their cloud infrastructure, personnel, and data were exposed; practitioners in both regions and those managing Middle Eastern political risk should review threat actor tactics and tactics, techniques, and procedures (TTPs) for similar compromise patterns.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary