Iran tracks US contractors’ mobile devices
According to a report by the Financial Times, at the beginning and during the 40-day war, Iranian cyber attackers attempted to locate devices belonging to US forces in the Middle East for targeting. The report states that at the beginning…
New Iranian APT “Cavern Manticore”
According to a report published by the Israeli cybersecurity organization “Check Point Research” a new Iranian advanced persistent threat group has emerged. This group, named “Cavern Manticore”, has been targeting the Israeli government and the country’s IT sector. The hacking…
Iranian citizen arrested for cyber attacks
According to Iran International, an Iranian citizen named Amir Barati was arrested last week in Montenegro. He is accused of leading a widespread hacking campaign that targeted over 130 universities, with the attacks estimated to have caused around $3.4 billion…
Handala Hack Group Commander Killed
According to a report published by the Israeli news agency C14, Yahya Hosseini Panjaki (also known as Seyed Yahya Hamidi) the leader of the Handala hack group – one of the most active and dangerous hacker groups that has targeted…
Nimbus Manticore group starts new campaign
Based on a newly released article from the cybersecurity firm Unit 42, the advanced persistent-threat group Nimbus Manticore – which is linked to the Islamic Revolutionary Guard Corps – is carrying out a widespread new campaign against organizations in the…
Further information about new hacking group, Setarehgan Azadi
After a reliable source informed us about the recent attack by a new hacking group against the Pendar Koshk Imen Company (PKI), a representative of the group contacted us to provide further information about them, which we have published below:…
Hacker Group “MuddyWater” uses Microsoft Teams to Steal Credentials
Days ago, the security company Rapid 7 announced on their website that the group MuddyWater has carried out a new ransomware attack. The MOIS aligned threat actor group, MuddyWater, which has been active since around 2018, has carried out a…
Pendar Kooshk Imen (PKI) Hacked
We have received information showing that Pendar Kooshk Imen Company has been hacked by an unknown group, resulting in a breach of the company’s supposedly secure communications with the national banking sector. This intrusion means that this seemingly new group…
Class-Based Internet in Iran and the Rollout of the New “Pro Internet” Plan
Historically, the Islamic Republic has repeatedly used internet shutdowns as a tool to suppress and censor its people. “White SIM cards” in Iran are a compelling example of how the regime uses this as a tool. White SIM cards (SIM…
Prana Network: We Hacked Two IRGC Front Companies
This morning, ICNA received an e-mail that appears to have been sent from a compromised e-mail server belonging to the company “Golden Globe”. In the email the hacking group Prana Network claims that, in addition to hacking Golden Globe, it…










