DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

Cybersecurity researchers from Dream Research Labs have disclosed a cyber espionage campaign conducted by an Iran state-aligned threat actor known as DarkBlinders, active between August and October 2026. The campaign targeted Israel and the Kurdistan Region of Iraq, resulting in the compromise of a high-profile individual in Israel and a government cloud environment in the Iraqi Kurdish region. The threat actor appears to be motivated by geopolitical interests aligned with Iran's strategic objectives in the Middle East. The campaign demonstrates sophisticated tradecraft capable of breaching both individual and government-level cloud infrastructure. This incident highlights ongoing cyber threats emanating from Iran-linked groups against regional adversaries and minority governance entities.