Iranian APT 'BladedFeline' Hides in Network for 8 Years
ID: 397959a1-5312-5b0e-9b2b-e44bf2c9bf5f
STIX ID: report--397959a1-5312-5b0e-9b2b-e44bf2c9bf5f
Feed Name: Dark Reading
Date Published: 2025-06-05
Date Updated: 2026-04-21
Author: Alexander Culafi, Senior News Writer, Dark Reading
ESET research uncovered "BladedFeline," an Iranian-aligned APT that maintained strategic access to Kurdish and Iraqi government networks from at least 2017 through 2024, using custom backdoors (Shahmaran, Whisper/PrimeCache), reverse shells (VideoSRV), PowerShell executors, and web shells; the group appears focused on long-term espionage of high-value targets and shows code overlap with OilRig/APT34, with technical details and IOCs provided.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.