Blinder Tunnel Campaign Targets Iraqi Infrastructure

The Blinder Tunnel campaign is an Iran-nexus cyber operation targeting critical infrastructure in Iraq. Attackers use fake Dubai Airports recruitment lures to deceive victims and gain initial access. The campaign leverages GitHub as a command-and-control (C2) mechanism, a technique that helps evade detection by blending into legitimate traffic. The operation is analyzed by Palo Alto Networks Unit 42 researchers. The use of job-themed social engineering lures is a common tactic among Iranian threat actors targeting Middle Eastern nations. The campaign's focus on Iraqi critical infrastructure suggests geopolitical motivations aligned with Iranian strategic interests. The combination of realistic lures and GitHub-based C2 infrastructure demonstrates a moderate-to-high level of operational sophistication.