Skip to content
Increased APT Activity from Iran-aligned Groups Targeting Israel

Increased APT Activity from Iran-aligned Groups Targeting Israel

First seen 30 Oct 2026, 08:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 09:16 UTC
  • •Iran-aligned groups are actively targeting Israel and some US companies.
  • •Belarus-aligned actors are increasingly supporting Russian cyber operations.
  • •APT groups are leveraging AI to enhance their cyber operations.

ESET's APT Activity Report indicates a resurgence of Iran-aligned groups, specifically FilthyFeline and MuddyWater, targeting multiple sectors in Israel and some US companies. This activity aligns with Russia-aligned operations supporting wartime objectives, particularly in Ukraine. Belarus-aligned actors are increasingly acting as cyberproxies for Russia, with notable destructive attacks reported. North Korea-aligned groups continue to focus on Ukraine and technology sectors, including drone technology. The report highlights the use of AI and large language models by APT groups to enhance their operations, although no significant changes in the APT landscape have been observed in the last six months. The report covers APT activities from April to September 2026, revealing a complex interplay of geopolitical tensions influencing cyber threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-01
ESET APT Activity Report period begins
ESET researchers began documenting APT activities, focusing on Iran-aligned, Russia-aligned, and Belarus-aligned groups.
Globenewswire
2026-10-28
ESET APT Activity Report published
The report reveals increased APT activity from Iran-aligned groups targeting Israel and US companies, along with Belarus-aligned groups acting as cyberproxies for Russia.
Globenewswire
2026-10-30
ESET APT Activity Report released
A comprehensive overview of APT activities for Q2 and Q3 2026 confirms the resurgence of Iran-aligned groups and their targeting of Israel.
ESET

More articles in this cluster (2)

Following this threat?

Track Arid Viper in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (20)

1 / 3

Common questions

Which countries are primarily targeted?
Iran-aligned groups are primarily targeting Israel and some US companies.
What methods are being used in these attacks?
APT groups are using AI and large language models to enhance their operations, including malware development.
What should organizations do to protect themselves?
Organizations should monitor for suspicious activity and strengthen their defenses against potential APT threats.