BladedFeline: Whispering in the dark

ESET documents BladedFeline, an Iran-aligned APT subgroup active since at least 2017, detailing a multi-year cyberespionage campaign against Kurdish and Iraqi government officials and a regional telecommunications provider; the report provides technical analysis of multiple backdoors and support tools (Whisper, PrimeCache, Shahmaran, Laret/Pinar, Slippery Snakelet, etc.), a timeline, IoCs (hashes, IPs, domains), and mappings to MITRE ATT&CK techniques, and assesses BladedFeline with medium confidence as a subgroup of OilRig.