Iran-linked
-
Iran-linked hackers use new Cavern C2 against Israeli targets
Iran-linked hackers used a new modular command and control framework called Cavern against Israeli organizations, according to Check Point Research. The activity relied on DLL side loading, service-provider trust chains and multiple post-exploitation modules.
-
Handala claims leak of US Marines data in WhatsApp threat campaign
US Marines in the Persian Gulf received WhatsApp threats from the Iran-linked Handala hacking group, which claimed to leak personal data on 2,379 service members and said it knew their family details and routines.
-
US agencies warn of Iranian-linked attacks on internet-facing PLCs
US agencies warned that Iran-linked hackers are targeting internet-facing PLCs in critical infrastructure, including water and energy systems, and have caused display manipulation, device disruption and financial loss in some cases.
-
Iran-Linked Password-Spraying Campaign Hits Microsoft 365 Accounts in Middle East
An Iran-linked threat actor is suspected of targeting Microsoft 365 accounts in Israel and the United Arab Emirates in March 2026, affecting more than 300 organizations in Israel and over 25 in the U.A.E. across three attack waves.
