Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
22 IOCs
Blinder Tunnel Campaign Targets Iraqi Infrastructure
Threat Actors
Malware Families
Excerpt
Blinder Tunnel Campaign Targets Iraqi Infrastructure Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Malware Malware Blinder Tunnel Campaign Targets Iraqi Infrastructure 23 min read Related Products Advanced DNS Security Advanced URL Filtering Advanced WildFire Cloud-Delivered Security Services Cortex Cortex XDR Cortex XSIAM Unit 42 Incident Response By: Unit 42 Published: October 6, 2026 Categories: Malware Threat Research…
Read the original report →Diamond Model
Adversary(3)
Infrastructure(6)
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →22 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | musicdel.ir | High | Score 58/100 | First seen |
| IP | 91.107.156.29 | High | Score 58/100 | First seen |
| SHA256 | d3561bd4aad003dc3e08157b0891860bb496b80cd6e44901692e08ab1d4e8260 | Medium | Score 53/100 | First seen |
| Domain | meetonline.cam | High | Score 58/100 | First seen |
| CVE | CVE-2026-88772 | High | Score 82/100 | First seen |
| SHA256 | 76273382e4252c1f60a2251141e108942494409c759358320735891762c0682e | High | Score 86/100 | First seen |
| Domain | portal.sharjahairport.cloud | High | Score 58/100 | First seen |
| CVE | CVE-2026-88771 | High | Score 82/100 | First seen |
| IP | 65.109.214.145 | High | Score 58/100 | First seen |
| SHA256 | 7cc571aca6d8715d9aaad3d83e1bcd30467565d583db1dfe73697c5d00a1f875 | Medium | Score 53/100 | First seen |
| Domain | drivegoogel.cam | High | Score 58/100 | First seen |
| IP | 38.180.136.127 | High | Score 58/100 | First seen |
| Domain | asdfafadafg.online | High | Score 58/100 | First seen |
| SHA256 | 53f35e49eb9b271fd8cbcd3daacb525328dbf159a03dbd1c7adebe0363daa402 | Medium | Score 53/100 | First seen |
| Domain | googelmeet.online | High | Score 58/100 | First seen |
| Domain | googeldrive.cam | High | Score 58/100 | First seen |
| Domain | ns1.soroshpasargad.com | High | Score 58/100 | First seen |
| IP | 87.248.129.239 | Low | Score 26/100 | First seen |
| SHA256 | 3fd810a3aa0039993393741b32287c367a9a5037a41e826906440887cdd3ed13 | Medium | Score 53/100 | First seen |
| SHA256 | f5b12772db6817f7a765a6fe7565fd3d4f87edc28e42fe3ec0244a372a410fc9 | Medium | Score 53/100 | First seen |
| SHA256 | 6e7d9b33f1e72ea1ede71373a604ecdb060dab7d42055179c1eede9ecd1fd239 | High | Score 86/100 | First seen |
| SHA256 | f5ba1645694c62f527ed6ceda8c68a5c3dd92b4032439167e8e937e72803b4bd | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…