EarlyNarratives
Pricing
Start free trialSign in
Start free trialSign in
Signal

Iranian hackers deploy MiniFast and MiniJunk V2 in phishing and SEO poisoning campaign targeting US aviation

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-05-26 07:13 UTCUpdated 2026-05-26 09:10 UTC
rss
cveexploitsmalwarethreat_actorsincident_response
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
BackEvidence (2)Get the free brief by emailStart free trial
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
View all evidence
Overview

The Iranian state-sponsored threat actor Nimbus Manticore has launched a new cyber campaign targeting organizations in the aviation and software sectors across the US, Europe, and the Middle East.

Entities
MiniFastMiniJunk V2
Score total
1.03
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • Campaign follows recent US-Israeli military operations against Iran in early 2026.
  • Use of AI-built malware indicates evolving threat actor capabilities.
  • Phishing and SEO poisoning tactics highlight persistent social engineering risks.
Why it matters
  • Targets critical aviation and software sectors with sophisticated malware.
  • Uses AI-generated malware and SEO poisoning to increase attack success.
  • Reflects ongoing cyber conflict linked to geopolitical tensions post US-Israel military action.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • Nimbus Manticore uses phishing and SEO poisoning to distribute MiniFast backdoor malware
  • The campaign targets aviation and software sectors across the US, Europe, and the Middle East
How sources frame it
  • The Hacker News: neutral
  • Infosecurity Magazine: neutral
All evidence
All evidence
Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign
Infosecurity Magazine · infosecurity-magazine.com · 2026-05-26 09:10 UTC
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
thehackernews · thehackernews.com · 2026-05-26 07:13 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • Infosecurity Magazine (1)
  • thehackernews (1)
Top origin domains (this list)
  • infosecurity-magazine.com (1)
  • thehackernews.com (1)