Country-native threat intelligence for the Arab world
See the threat in your country before it reaches you
Aswar tracks ransomware, data leaks, infostealer infections and attacks on critical organisations in 13 Arab countries, and publishes only what two independent outlets or an official source confirm.
Is your domain exposed?
Free, no sign-up: the security rating, open internet exposures, leaked-credential counts and published incidents. Up to 30 checks an hour.
Latest corroborated incidents
Landmark Group investigates unauthorised access to Shukran loyalty member data
Dubai-based retailer Landmark Group says an unauthorised party accessed customer information held by its Shukran loyalty programme. The company says it contained the access, opened an investigation and informed the authorities. It has not said how many members are affected; members who received a text message from the company may be among them.
Sources: The National, Gulf News, Khaleej Times, Arabian Business
Espionage group reaches a Kurdistan Region government cloud, researchers say
Dream Research Labs reports that a campaign it tracks as DarkBlinders compromised a government cloud environment in Iraq's Kurdistan Region, as well as a prominent person in Israel, in activity dated to August and October 2026. Lures imitated Kuwait's foreign ministry, the GCC secretariat and Kurdistan-themed cloud domains, and the malware used GitHub for control.
Sources: The Hacker News, CybelAngel, GBHackers
Hijacked content platform puts obscene video on a Giza highway billboard
On 29 October a digital billboard on the 26 July axis in Giza, towards Sheikh Zayed, showed pornographic clips. Egypt's Interior Ministry said the screen belongs to an advertising firm that streams its content through a foreign provider, and that the provider's platform was breached. The firm switched its screens off while the breach was handled.
Sources: Euronews, Egyptian Streets, Gulf News, جريدة القدس and 12 more
Claims we are watching
Attackers' claims that outlets reported, without official confirmation yet.
Attackers claim to have leaked about 695,000 records from Morocco's Watiqa.ma civil-document platform
In mid-May 2026 a threat actor posted what it presented as a dump of about 695,000 records tied to Watiqa.ma, the online service Moroccans use to request civil-status documents such as birth certificates. Moroccan and regional outlets reported the claim; no official confirmation from the platform or Morocco's data protection authority (CNDP) has been found.
Sources: Dark-web forum post (not linked), Morocco World News, Médias24