Security researchers from the American-Israeli cybersecurity firm Check Point Software Technologies Ltd. revealed in March that they had uncovered evidence of digital intrusions targeting Iraqi government agencies. The attacks, they allege, were carried out by the hacking group APT34 \u2014 alternatively known as OilRig, Helix Kitten, or MuddyWater \u2014 with long-standing ties to Iran\u2019s Ministry of Intelligence and Security (MOIS). <\/p>\n
The operation against the Iraqi government reportedly commenced no later than March 2024, with cybersecurity analysts discovering three distinct custom-built backdoors \u2014 Veaty, Spearal, and a third unnamed tool used for Secure Shell (SSH) tunneling \u2014 uploaded to VirusTotal. The malicious executables employed deceptive double extensions to masquerade as harmless document files, a tactic strongly indicating phishing emails as the primary attack vector.<\/p>\n
Recent intelligence suggests these cyber operations have persisted into 2025, with a parallel APT34 cell simultaneously targeting Yemeni entities. Check Point analysts interpret this pattern as evidence of Iran applying the principle of “keeping friends close while keeping enemies even closer” through cyber espionage against its immediate neighbors such as Iraq and Yemen.<\/p>\n
However, given that these nations maintain close bilateral relations \u2014 rooted in shared religious, political, and economic ties \u2014 the allegations made by the American-Israeli firm appear to be a transparent effort to drive a wedge between Iran and its regional partners in the Middle East.<\/p>\n
With Middle Eastern tensions reaching new heights, such claims may well be part of a broader pressure strategy against Iran orchestrated by its geopolitical adversaries \u2014 Israel and the U.S. \u2014 spearheaded by the Trump administration.<\/p>\n","protected":false},"excerpt":{"rendered":"
Security researchers from the American-Israeli cybersecurity firm Check Point Software Technologies Ltd. revealed in March that they had uncovered evidence of digital intrusions targeting Iraqi government agencies. The attacks, they allege, were carried out by the hacking group APT34 \u2014 alternatively known as OilRig, Helix Kitten, or MuddyWater \u2014 with long-standing ties to Iran\u2019s Ministry […]<\/p>\n","protected":false},"author":1,"featured_media":1799,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1619,1620,1632,1630,1624,1627,1628,1629,1631,1622,1623,1621,827,1625,168,1552,1626],"class_list":["post-1798","post","type-post","status-publish","format-standard","has-post-thumbnail","","category-facts","tag-apt34","tag-check-point","tag-check-point-software-technologies-ltd","tag-cyber-espionage","tag-helix-kitten","tag-iran-2","tag-iranian-ministry-of-intelligence-and-security","tag-iraq-yemen","tag-middle-east","tag-mois","tag-muddywater","tag-oilrig","tag-blizhnij-vostok","tag-irak-jemen","tag-iran","tag-kibershpionazh","tag-ministerstvom-razvedki-i-bezopasnosti-irana"],"yoast_head":"\n