Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle EastThe Hacker News·Sep 20, 12:44 UTC · Sep 20, 2024RansomwareCVE-2019-060460
Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and IsraelThe Hacker News·May 22, 03:19 UTC · May 22, 2024RansomwareCVE-2019-060460
Iranian government hackers using Chaos ransomware as cover, researchers sayThe Record·Jun 26, 00:00 UTC · Jun 26, 2026Ransomware157
FBI takes down leak sites tied to Iran’s Ministry of Intelligence and SecurityThe Record·Mar 20, 17:25 UTC · Mar 20, 2026Ransomware60
Microsoft says Iranian hackers combine influence ops with hacking for maximum impactCyberScoop·May 2, 16:00 UTC · May 2, 2023Ransomware57
Iranian linked conglomerate MuddyWater comprised of regionally focused subgroupsCisco Talos·Mar 10, 13:02 UTC · Mar 10, 2022Ransomware57
Iranian cyber espionage disguised as a Chaos Ransomware attackSecurity Affairs·May 6, 14:19 UTC · May 6, 2026Ransomware57
Iranian APT MuddyWater targets Turkish users via malicious PDFs, executablesCisco Talos·Jan 31, 13:00 UTC · Jan 31, 2022Ransomware57
Fielding Threats: Cyber, Influence, and Physical Threats to the 2022 FIFA World Cup in QatarRecorded Future·Jun 23, 00:00 UTC · Jun 23, 2026Ransomware60
Microsoft Takes Down Group Operating RansomwareInfosecurity Magazine·May 19, 15:00 UTC · May 19, 2026Ransomware60
Cybercriminals can go from click to compromise in less than a dayHelp Net Security·Apr 23, 13:42 UTC · Apr 23, 2026RansomwareCVE-2018-1337960
Iran-linked group Handala hacked FBI Director Kash Patel’s personal email accountSecurity Affairs·Mar 28, 10:22 UTC · Mar 28, 2026Ransomware45
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach WidensThe Hacker News·Oct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287CVE-2025-54957CVE-2025-6950+21 CVEs60
31 New Ransomware Groups Join the Ecosystem in 12 MonthsInfosecurity Magazine·Oct 8, 14:30 UTC · Oct 8, 2024Ransomware60
Are hardware supply chain attacks “cyber attacks?”Cisco Talos·Sep 26, 18:01 UTC · Sep 26, 2024Ransomware60
THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 16The Hacker News·Sep 24, 04:12 UTC · Sep 24, 2024Ransomware60
Microsoft: Iran is refining its cyber operationsCyberScoop·Feb 7, 05:00 UTC · Feb 7, 2024Ransomware in the wild60
Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird RansomwareThe Hacker News·May 25, 06:03 UTC · May 25, 2023Ransomware57
Iranian Hackers Using SimpleHelp Remote Support Software for Persistent AccessThe Hacker News·Apr 18, 09:05 UTC · Apr 18, 2023Ransomware57
MERCURY APT behind destructive attacks on hybrid environmentsSecurity Affairs·Apr 10, 14:06 UTC · Apr 10, 2023Ransomware57
Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware GuiseThe Hacker News·Apr 8, 14:27 UTC · Apr 8, 2023Ransomware57
Pro-Iranian hacking group focused on Saudi Arabia, researchers sayCyberScoop·Jan 26, 11:00 UTC · Jan 26, 2023Ransomware in the wild60
Iranian Hackers Target High-Value Targets in Nuclear Security and Genomic ResearchThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2022Ransomware57
U.S. Charges 3 Iranian Hackers and Sanctions Several Others Over Ransomware AttacksThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2022RansomwareCVE-2018-13379CVE-2019-5591CVE-2020-12812+6 CVEs60
Friday Squid Blogging: New Giant Squid VideoSchneier on Security·Oct 15, 00:00 UTC · Oct 15, 2021Ransomware57
Threat Roundup for February 14 to February 21Cisco Talos·Feb 21, 18:43 UTC · Feb 21, 2020Ransomware57