THREAT OPS › Threat News › Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters
Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters
<p><em>In April, SentinelLABS’ Tom Hegel <a href="https://www.linkedin.com/pulse/five-weeks-cyber-war-iran-whats-actually-happening-all-tom-hegel-fcddf/" target="_blank">published an initial assessment</a> of the first five weeks of the conflict. Three months later, the evidence supports refinement.</em></p> <h2>Executive Summary</h2> <ul> <li>The cyber risk remains quieter than the public narrati
Attributed threat actors
- OilRigG0049
- APT42G1044
- HEXANEG1001
- MuddyWaterG0069
- VOID MANTICOREG1055
- Ferocious KittenG0137
MITRE ATT&CK techniques
Indicators of compromise
- 5f9a1fe5845d94894f3edd50af560d3amd5
- https://www.security.com/threat-intelligence/iran-cyber-threat-activity-usurl
- https://research.checkpoint.com/2026/cavern-manticore-exposing-iran-linked-modular-c2-framework/url
- https://research.checkpoint.com/2024/iranian-malware-attacks-iraqi-government/url
- https://www.justice.gov/opa/pr/justice-department-disrupts-iranian-cyber-enabled-psychological-operationsurl
- https://research.checkpoint.com/2024/bad-karma-no-justice-void-manticore-destructive-activities-in-israel/url
- https://www.stryker.com/us/en/about/news/2026/a-message-to-our-customers-03-2026.htmlurl
- https://apnews.com/article/5f9a1fe5845d94894f3edd50af560d3aurl
- https://arxiv.org/abs/2605.00187url
- https://www.war.gov/News/Transcripts/Transcript/Article/4418959/secretary-of-war-pete-hegseth-and-chairman-of-the-joint-chiefs-of-staff-gen-dan/url