Cyberattacks target Israeli steel industry and Iraqi Kurdistan government

A series of cyber espionage and disruptive operations have targeted Israeli and Iraqi Kurdish infrastructure. The Cyber Isnaad Front announced an attack on A. Pladot, a steel and iron production company located in the Gilboa industrial zone. The group claims to have extracted over 25 terabytes of sensitive data from the company's servers before deleting it from the systems.

Separately, security researchers from Dream Research Labs identified a campaign by a threat group known as DarkBlinders, which is linked to Iran. Operating between August and October 2026, the group reportedly compromised a high-profile individual in Israel and breached a government cloud environment in the Kurdistan Region of Iraq. The group typically utilizes spear-phishing techniques to deploy malware, including tools such as SHELBYLOADER and SHELBYC2, to facilitate data exfiltration and remote control.