⤷ Title: Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:11:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppDomainManager hijacking #Blinder Tunnel #CL_STA_1178 #fake job lure #Github C2 #Iran #ShelbyLoader #Unit 42
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:11:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppDomainManager hijacking #Blinder Tunnel #CL_STA_1178 #fake job lure #Github C2 #Iran #ShelbyLoader #Unit 42
Daily CyberSecurity
Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq
At a Glance Actor CL-STA-1178, assessed as Iranian state-aligned (high confidence, per Unit 42) Activity Fake job lures, trojanized coding tests, GitHub-based espionage malware, credential phishin…
❤1