Skip to main content
MalwarePublished Updated

Middle East Conflict Fuels Opportunistic Cyber Attacks

Source AlienVault OTX General

0

Description

The ongoing conflict in the Middle East has triggered a surge in cybercriminal activity. Over 8,000 newly registered domains with conflict-related keywords have been identified, many of which may be weaponized in future campaigns. Multiple cases of malicious activity have been observed, including targeted attacks using conflict-themed lures, deployment of the LOTUSLITE backdoor, fake news blogs leading to StealC malware, phishing sites impersonating government portals, donation scams, fraudulent storefronts, and meme-coin pump-and-dump schemes. Threat actors are leveraging various techniques such as DLL sideloading, shellcode execution, and social engineering to compromise victims. The campaigns demonstrate the opportunistic nature of cybercriminals in exploiting geopolitical events for malicious purposes.

Indicators of compromise

Domains 15

  • cfgomma.com
  • e-kflower.com
  • flourishingscreencousin.com
  • irandonation.org
  • khameneisol.xyz
  • nowarwithiran.store
  • arch.megadatahost1.lol
  • arch2.maxdatahost1.cyou
  • arch2.megadatahost1.lol
  • media.hyperfilevault2.mom

URLs 3

  • http://www.e-kflower.com/_prozn/_skin_mbl/home/KApp.rar
  • http://www.e-kflower.com/_prozn/_skin_mbl/home/KAppl.rar
  • https://www.360printsol.com/2026/alfadhalah/thumbnail?img=index.png.

IP addresses 2

  • 172.81.60.97
  • 80.97.160.190

Hashes 16

  • 098bc0dd6a02a777fabb1b7d6f2da505
  • 10fb1122079b5ae8e4147253a937f40f
  • 6accd57e48c34cadc998d00594229e42
  • 722bcd4b14aac3395f8a073050b9a578
  • 8c5a4dafed1586cec48d8eda267d8e42
  • 972585e50798cb5f122f766d8f26637f
  • 1b3fa84de23c6e789958462e6185e9cf0680ed9c
  • 7d4e31c8b11be7c970860c4fbc8fe85c70724cb1
  • b9dfc411699e07343b9b95daa79fe7e4b6811579
  • be34901237c9fa9563e8dc9e71faf3a7e68f983f

Community reviews

Loading reviews…