As Geopolitical Tensions Mount, Iran's Cyber Operations Grow

The report describes an APT34 (Iran-linked) cyber-espionage campaign from March–May that targeted Iraqi government ministries using socially engineered documents to install .NET backdoors (Veaty and Spearal). The campaign used custom DNS tunneling and an email-subject-based C2 channel focused on data exfiltration rather than destructive actions; the article situates this activity within broader Iranian APT operations in the region and recommends defensive measures such as zero-trust architectures and mature SOC/MDR capabilities.