Iran protest-themed malware targeted activists during internet blackout

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Crescent Harvest Malware Targets Iranian Protest Supporters A new malware campaign named 'Crescent Harvest' has been identified, targeting supporters of protests in Iran. The malware specifically affects Farsi-speaking users seeking information about the demonstrations, coinciding with an internet blackout in the region. Security experts from Acronis first detected the malware in early January 2026. 10 sources 40