Threat Actor
TAG-182
- First Reported
- Jul 21, 2026
- Latest Reported
- Jul 21, 2026
Reported Context (1)
- Associated with surveillance of dissidents and diaspora; recent activity used lures to distribute MarkiRAT to Farsi-speaking users inside and outside Iran. No sponsor was publicly attributed with confidence. Midyear Assessment Finds Iran-Linked Cyber Risk Centered on Persistent Access and Trusted Pathways
Malware (1)
People (1)
Threat Actors (31)
Vendors (2)
Products (3)
Industries (7)
Countries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.