Escalation in the Shadows: Iranian APT Seedworm Deploys ‘Dindoor’ Backdoor in New Cyberoffensive

The Threat Hunter Team reports a surge in cyberespionage by Iranian-linked APT Seedworm targeting U.S. and Canadian organizations since February 2026, including a defense supplier and infrastructure-related entities; researchers identified a new persistent backdoor called Dindoor, noted hacktivist data-leak amplification by groups like Handala, and warn of heightened risk to critical national infrastructure and supply-chain/public-facing systems.