Arcweb

Iran Cyber Attack Involves APTs and Hacktivist Proxies

First seen 3 Mar 2026, 17:10 UTC • Arcweb

•38.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A coordinated cyber attack targeting Iran has been attributed to Advanced Persistent Threats (APTs) and hacktivist proxies. These groups, often state-funded, are known for executing sophisticated attacks on critical infrastructure. The incident highlights the ongoing risks posed by APTs in industrial cybersecurity.

How this analysis works

Timeline

2026-03-03

Cyber attack on Iran reported

2026-03-03

APT groups identified as key actors in the attack

Date unknown

Previous attacks by APTs mentioned, including ELECTRUM

Attack Flow

9 entities, 16 inferred relationships (STIX 2.1).

Threat Actor (5)

Charming Kitten
CyberAv3ngers
Electrum
Sandworm
Handala

Technique (2)

Malware
Ransomware

Organization (1)

Israel Opportunity Energy

Affected Platform (1)

Unitronics PLCs

Relationships

Charming Kitten uses Malware
Charming Kitten uses Ransomware
CyberAv3ngers uses Malware
CyberAv3ngers uses Ransomware
Electrum uses Malware
Electrum uses Ransomware
Sandworm uses Malware
Sandworm uses Ransomware
Handala uses Malware
Handala uses Ransomware
Charming Kitten targets Israel Opportunity Energy
CyberAv3ngers targets Israel Opportunity Energy
Electrum targets Israel Opportunity Energy
Sandworm targets Israel Opportunity Energy
Handala targets Israel Opportunity Energy
Charming Kitten related to Unitronics PLCs

Continue Reading

Iranian Hackers Target US Aviation with New Malware and SEO Poisoning Surge in Middle East Cyber Espionage Amid Ongoing Conflict North Korea Adopts Modular Malware to Evade Detection and Takedowns New York Implements Cyber Regulations Amid Rising Threats to Water Facilities Iranian Cyber Espionage Targets US Academics and Policy Experts RedKitten Campaign Targets Iranian Protest Monitors with AI Malware

Iran Cyber Attack Involves APTs and Hacktivist Proxies

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading