Zscaler Dust Specter APT Targets Iraqi Government Officials
Article Content
Browse articles 
In January 2026, Zscaler ThreatLabz identified a suspected Iran-nexus threat actor targeting government officials in Iraq. The campaign involved previously undocumented malware, including SPLITDROP, TWINTASK, TWINTALK, and GHOSTFORM, indicating a significant overlap in tools and techniques with known Iran-nexus APT groups.
Ask AI about this cluster
Answers cite the sources they use
Updated 241d ago How this analysis works
Timeline
2026-01-01
Zscaler ThreatLabz observes activity by Iran-nexus threat actor
2026-01-01
Previously undocumented malware identified: SPLITDROP, TWINTASK, TWINTALK, GHOSTFORM
2026-03-02
Articles published reporting on the threat actor's activities
More articles in this cluster (9)
Following this threat?
Track Dust Specter and Ghostform in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed