Overview

• Iranian hackers are waging a sophisticated espionage campaign against regional rivals, including Israel, Saudi Arabia, and Jordan, demonstrating improved cyber capabilities and marking a shift from disruption to intelligence gathering.
• The hacking campaign is linked to Iran's Ministry of Intelligence and Security and has successfully targeted key defense and intelligence agencies to collect critical intelligence.
• Using advanced malware, the hackers have managed to infiltrate computer networks of government staff, militaries, telecommunications companies, and financial organizations, exfiltrating large amounts of data undetected for extended periods.
• Attacks have also mapped out the networks of targeted organizations, providing Iran with blueprints of foreign cyber infrastructure that can aid in planning and executing future attacks.
• The campaign stands out for its stealth and sophistication—being recognised as the most sophisticated Iranian cyberattack to date—and could potentially be of use to Iran for years to come.