Posts Tagged With
Iran
Cyber Threat Intelligence
Escalation in the Middle East: Tracking “Operation Epic Fury” Across Military and Cyber Domains
On February 28, the United States and Israel launched coordinated strikes across Iran under Operation Epic Fury (also referenced in reporting as Operation Lion’s Roar).
Corporate and Physical Security
Iran-Aligned Militias Signal Expanded Regional Risk Amid US–Israel–Iran Conflict
Across multiple theaters, Iran-aligned groups are using similar language, emphasizing shared objectives, and in some cases pointing to an expanded target set that reaches beyond their traditional operating areas. Taken together, this messaging suggests continued alignment across militant networks and a heightened likelihood of retaliatory or opportunistic activity targeting US and Israeli interests.
The Israel-Iran Conflict Through an Intelligence Lens
Examining the strategic intelligence, cyber tactics, and physical confrontations that define the enduring Israel-Iran conflict.
Amid Escalating Iran-Israel Conflict, Understanding the Hybrid Nature of Cyber Threats
Exploring the dynamics of cyber warfare in the current Iran-Israel Conflict: Threat actors, motivations, affiliations, targets, and TTPs
Cyber Threat Intelligence
Who’s Behind Iranian Cyber Threat Actor Group MuddyWater?
On January 12, US Cyber Command attributed the Iranian cyber threat group “MuddyWater” to Iran’s Ministry of Intelligence and Security (MOIS)—one of Iran’s premier intelligence organizations accountable only to Ayatollah Khamenei, Iran’s supreme leader. Though the threat actor group has been conducting cyber espionage operations since 2017, this is the first time that the U.S. government has publicly acknowledged its ties to the MOIS. MuddyWater’s commonly targets the Middle East, as well as Europe and North America in some instances.
Current Events
Telegram Images Allegedly Show Taliban-Controlled US Military Equipment in Iran
On September 1 and 2, members of unofficial pro-Iranian regime Telegram channels reported evidence that Iran was allegedly purchasing US military hardware from the Afghan Taliban.
Cyber Threat Intelligence
A Second Iranian State-Sponsored Ransomware Operation “Project Signal” Emerges
Flashpoint has validated recently leaked documents that indicate Iran’s Islamic Revolutionary Guard Corps (IRGC) was operating a state-sponsored ransomware campaign through an Iranian contracting company called “Emen Net Pasargard” (ENP) (aka "Imannet Pasargad," "Iliant Gostar Iranian," "Eeleyanet Gostar Iraniyan"). These three documents were originally leaked between March 19 and April 1, 2021, by the Iranian dissident group “Lab Dookhtegan,” famous for providing highly reputable intelligence on Iranian state-sponsored cyber programs.