Suspected Iran-nexus espionage activity targeting the aerospace, aviation and defense industries in Middle East countries.

YouTube video by PHONKmedia東京

An IRGC-directed persona sabotaged industrial refrigeration and staged a disk-wipe campaign at Israeli facilities during a ceasefire. How the operation unfolded, and how to find the actor before it re...

Overview: This post is long overdue and unlike most of my posts, this is not a technical post, but rather a high level, strategical post, al...

Identifier: TRR260101. Summary RedKitten is a newly identified campaign targeting Iranian interests, likely including non-governmental organizations and individuals involved in documenting recent huma...

Profero IRT reverse engineered a .NET 8 RAT named WindowsAudit.exe recovered from a victim host in April 2026. It uses Discord as primary C2, runs as SYSTEM, tears down EDR in Safe Mode, and ships a f...

See how Lazarus Group's IT workers scheme was exposed on a live camera using real-time monitoring inside ANY.RUN’s sandbox.

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.

Unmasking Iran’s IRGC Cyber Operations Targeting High-Profile Individuals The SpearSpecter campaign linked to Iran’s IRGC / APT42 used social engineering and the TAMECAT backdoor to infiltrate high-v...

YouTube video by כאן | דיגיטל - תאגיד השידור הישראלי

Tactics, techniques and procedures we discovered during incident response investigations into UNC1549 activity.

ALT: two men are standing next to each other in a room .

YouTube video by Juche - Topic

Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500) - KittenBusters/CharmingKitten

YouTube video by ÆSTRAL

YouTube video by skeler.

File transfer used to be simple fun - fire up your favourite FTP client, log in to a glFTPd site, and you were done. Fast forward to 2025, and the same act requires a procurement team, a web interfac...

YouTube video by FOMH

YouTube video by almogfx

YouTube video by BACKWHEN

1/16 Recently I became aware of this @Jerusalem_Post breaking "News" article, which turns out to be more like a paid content: https://t.co/RD4tEI0mRv

Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

YouTube video by skeler.

Tonight, Iran International TV revealed the identity of one of the key figures behind the Handala hacking group that claimed responsibility for attacking the ne...