Screening Serpens is a apt_group tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed May 22, 2026; most recent activity June 1, 2026.
Iranian hackers have employed AppDomainManager hijacking in .NET applications to disable security telemetry and evade endpoint detection and response (EDR) tools. This advanced technique is linked to the Iran-nexus…
The Screening Serpens group, linked to Iran, has initiated a targeted espionage campaign using a new remote access Trojan (RAT) named MiniUpdate. This campaign primarily targets technology professionals in the United…
Following U.S. military strikes on Iran, there is an anticipated increase in cyber warfare activities targeting U.S. operational technology and critical infrastructure. Iran is expected to retaliate with cyber attacks…