Related Threat Clusters
-
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
67 articles · Updated June 18, 2026 -
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
Tortoiseshell Expands Malware Arsenal with New Backdoor and SSH Tunneling Tool
The Iranian-linked Tortoiseshell APT group has expanded its malware toolkit, introducing a new backdoor and reverse SSH tunneling utility. Group-IB Threat Intelligence identified these developments following a report by…
6 articles · Updated August 26, 2026 -
Mirage Kitten Malware Targets Middle East and Africa with New Toolset
The Mirage Kitten APT group has deployed a sophisticated malware suite, including the NightLedger backdoor, across the Middle East and Africa. This campaign has successfully infiltrated sensitive sectors such as…
2 articles · Updated July 30, 2026 -
Iranian APT Groups Target Israeli Organizations with Modular C2 Frameworks
In 2026, Iranian APT groups, notably Cavern Manticore and OilRig, have intensified cyber operations against Israeli organizations, primarily in the IT and government sectors. Cavern Manticore employs a modular…
10 articles · Updated July 6, 2026 -
Hack-for-Hire Campaign Targets Journalists in MENA Using Phishing and Spyware
A hack-for-hire operation has been uncovered targeting journalists and activists across the Middle East and North Africa, particularly focusing on Egyptian and Lebanese individuals. The campaign, attributed to a group…
18 articles · Updated April 8, 2026 -
Trump Threatens to Obliterate Iran's Power Plants Amid Escalating Conflict
On March 22, 2026, President Donald Trump issued a 48-hour ultimatum to Iran, threatening to 'obliterate' its power plants if the Strait of Hormuz is not fully reopened. This comes as Iran launched missile attacks on…
2387 articles · Updated March 21, 2026 -
Escalating U.S.-Iran Tensions Amid Ongoing Peace Talks
In recent developments, the U.S. conducted military strikes against Iranian targets in the Strait of Hormuz, claiming self-defense despite ongoing peace negotiations. The Pentagon reported that two Iranian ships were…
2 articles · Updated May 29, 2026 -
Escalating Houthi Attacks on Saudi Arabia Amid Iran War
Yemen's Houthi rebels have intensified their attacks on Saudi Arabia, claiming responsibility for a drone strike on an Aramco oil refinery in Jazan on August 13, 2026. This attack is part of a broader escalation that…
4 articles · Updated August 14, 2026 -
Iran's New Leader Vows to Protect Nuclear Capabilities Amid Ongoing Conflict
Mojtaba Khamenei has been appointed as Iran's supreme leader following the death of his father, Ayatollah Ali Khamenei, during the ongoing Israel-Iran war. His leadership comes as Iran intensifies attacks on oil and…
23 articles · Updated May 1, 2026
Recent Intelligence Reports
- Securelist — securelist.com · August 26, 2026
- Rapid7 and Starlink: Africa's Cybersecurity Challenge is Bigger than Access to Technology — Rapid7 · August 17, 2026
- Rapid7 and Starlink: Africa's Cybersecurity Challenge is Bigger than Access to Technology — Rapid7 · August 17, 2026
- The Houthis Enter the Iran War and Everything Gets Worse — Csis · August 13, 2026
- Breakglass Intelligence's March 2026 analysis — intel.breakglass.tech · August 12, 2026
- Egypt says drone attack caused fire on two ships in Damietta port — Thenationalnews · July 30, 2026
- Egypt confirms drone caused fire on two gas vessels at Damietta - AL — Al-Monitor · July 30, 2026
- Drone Hits Gas Tanker at Egypt's Damietta Port, Causing Fire - Global Banking & Finance Review — Globalbankingandfinance · July 29, 2026