Tia N.List

Reported by 3 outlets

Blinder Tunnel Campaign Targets Iraqi Infrastructure

new0.1
Why this score
Breadth
1.50 / 2.0 · 3 sources
Authority
1.00 / 2.0 · best outlet weight
Severity
1.00 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.59 / 0.6 · time to second source
Recency
× 0.02 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.1 / 10 = base × recency + community
unit42.paloaltonetworks.comcyber.netsecops.iosecurityonline.info desk first seen 7d ago

Desk analysis

The Blinder Tunnel campaign is an Iran-linked operation using fake Dubai Airports recruitment lures to drop ShelbyLoader V2 malware. It targets Iraqi infrastructure and uses GitHub-hosted command-and-control. The campaign combines social engineering with developer-environment malware delivery, making it a targeted threat rather than opportunistic crimeware.

Timeline

  1. original reporting

    Blinder Tunnel Campaign Targets Iraqi Infrastructure

    unit42.paloaltonetworks.com · 7d ago · October 6th, 2026

    Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appeared first on Unit 42 .

  2. update from unit42.paloaltonetworks.com

    (unit42.paloaltonetworks.com) Blinder Tunnel: Iranian State-Aligned Threat Actor Targets Middle Eastern Critical Infrastructure Using Themed

    unit42.paloaltonetworks.com · 7d ago · October 6th, 2026

    (unit42.paloaltonetworks.com) Blinder Tunnel: Iranian State-Aligned Threat Actor Targets Middle Eastern Critical Infrastructure Using Themed

    via Mastodon https://unit42.paloaltonetworks.com/blinder-tunnel-targets-critical-infrastructure/

  3. update from cyber.netsecops.io

    📰 Iranian Actor Targets Iraqi Infrastructure with "Blinder Tunnel" Unit 42 uncovers 'Blinder Tunnel,' an Iranian-nexus campaign targeting Ir

    cyber.netsecops.io · 7d ago · October 6th, 2026

    📰 Iranian Actor Targets Iraqi Infrastructure with "Blinder Tunnel" Unit 42 uncovers 'Blinder Tunnel,' an Iranian-nexus campaign targeting Ir

    via Mastodon https://cyber.netsecops.io/articles/iranian-blinder-tunnel-campaign-targets-iraqi-critical-infrastructure/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

  4. update from securityonline.info

    The Blinder Tunnel campaign used a fake Dubai Airports coding test to drop ShelbyLoader V2 on an Iraqi target. See how it works and how to d

    securityonline.info · 5d ago · October 8th, 2026

    The Blinder Tunnel campaign used a fake Dubai Airports coding test to drop ShelbyLoader V2 on an Iraqi target. See how it works and how to d

    via Mastodon https://securityonline.info/blinder-tunnel-campaign/?utm_source=mastodon&utm_medium=jetpack_social

  5. mentioned by cyber.netsecops.io

    📰 Iranian Actor Targets Iraqi Infrastructure with "Blinder Tunnel" Unit 42 uncovers 'Blinder Tunnel,' an Iranian-nexus campaign targeting Ir

    cyber.netsecops.io · 1d ago · October 12th, 2026

Covered in

digest 2026-10-08

Source on GitHub