APT IRAN

Reported Context (4)

Named group whose Telegram channel threatened the United States; the article does not attribute either incident to the group. Iran-Linked Hackers Disrupt UK Power Plant and US Wastewater Facilities
Named as a pro-Iranian group whose propaganda and cyber operations were described as similar to those attributed to Handala. Handala Hack Team Linked to Iran’s MOIS After Attacks on Stryker and FBI Director
Pro-Iranian hacktivist group that claimed to possess stolen Lockheed Martin data; the claims remain unverified. Analysis Links Ashab al-Yamin’s Claims to a Broader Iranian-Aligned Telegram Network
Listed for data exfiltration and ransomware activity against Israeli academic and government systems; the report does not verify the claims. Report: Hacktivist Activity in the Iran-Israel Cyber Standoff Escalated in June 2025

People (1)

Threat Actors (42)

MITRE ATT&CK (1)

Products (6)

Tools (1)

Industries (13)

Countries (13)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.