Related Threat Clusters
-
Iranian Hackers Target US Aviation with New Malware and SEO Poisoning
Iranian state-aligned hackers, known as Nimbus Manticore (UNC1549), have intensified cyberattacks against the US aviation sector amid the ongoing US-Iran military conflict. Utilizing career-themed phishing and a novel…
6 articles · Updated May 26, 2026 -
Iranian Cyber Espionage Targets US Academics and Policy Experts
Between June and August 2025, a previously unidentified Iranian cyber actor, dubbed UNK_SmudgedSerpent, conducted targeted phishing attacks against US academics and foreign policy experts. The campaign aimed to steal…
1 article · Updated November 10, 2025 -
Iranian APT UNK_SmudgedSerpent Targets US Policy Experts with Phishing Attacks
Between June and August 2025, the Iranian-linked APT UNK_SmudgedSerpent conducted targeted phishing campaigns against US academics and foreign policy experts. The group employed techniques such as credential theft and…
5 articles · Updated November 10, 2025 -
Iranian Hackers Target U.S. Policy Experts with Phishing Attacks
Between June and August 2025, a cyber group identified as UNK_SmudgedSerpent targeted U.S. academics and foreign policy experts focused on Iran. The attackers initiated contact through seemingly benign conversations to…
5 articles · Updated November 7, 2025
Recent Intelligence Reports
- Iranian APT Group Targets Aviation and Software Firms with Updated Tools — Eplaneai · May 26, 2026
- IRGC-linked Nimbus Manticore group attacks defense, aerospace, telecom sectors using ... — Industrialcyber.Co · May 26, 2026
- Iran — Infosecurity-Magazine · May 26, 2026
- Iranian Cyber Espionage: Proofpoint Uncovers UNK_SmudgedSerpent — Esecurityplanet · November 10, 2025
- UNK_SmudgedSerpent Targets Academics With Political Lures — Infosecurity-Magazine · November 5, 2025
- Iran's Elusive "SmudgedSerpent' APT Phishes Influential US Policy Wonks — Proofpoint · November 5, 2025
- Elusive Iranian APT Phishes Influential US Policy Wonks — Darkreading · November 5, 2025