Montenegrin police and the FBI have arrested an Iranian national wanted by the United States over a major hacking campaign that allegedly targeted US universities and benefited Iran’s Revolutionary Gu...

Eagle Eye stays on the air thanks to people around the world. No company, no government, no ads. Only you.

Eagle Eye: eyes on the free world for 92 million Iranians, via satellite TV. No internet required.

In my previous analyses of the Charming Kitten leak, I examined the organizational structure, target lists, financial infrastructure, and operational capabiliti...

ALT: a computer screen with a netflix logo on the bottom

The cyber group "Banished Kitten," operating under the alias "Handala" and affiliated with the Ministry of Intelligence and Security of Iran (MOIS), has once ag...

Europol announced the seizure of Cryptomixer’s official website, as well as 25 million euros and 12 terabytes of data from the mixer's service.

A massive leak of internal documents has blown the cover off one of Iran's most active hacking groups. For years, the cybersecurity community tracked them as AP...

The fourth release of leaked documents from Iran's APT35 (Charming Kitten) operation exposes something previous leaks haven't: the complete financial backbone a...

پایگاه داده جامع حاوی اطلاعات شخصی دانشجویان آکادمی راوین، آموزشگاه مخفی وزارت اطلاعات که ایران‌اینترنشنال پیشتر هویت اعضای آن را افشا کرده بود، به صورت گسترده منتشر شده است.

Based on the intelligence assessments from multiple government agencies, Ravin Academy functions as a MOIS-directed recruitment and training front operating und...

In my previous analysis of the Charming Kitten leak, I examined the unprecedented breach that exposed the inner workings of an Iranian state-sponsored hacking o...

In what appears to be one of the most significant breaches of an Iranian state-sponsored hacking operation to date, an anonymous source has published internal d...

Thalha Jubair, 19, from East London, and Owen Flowers, 18, from Walsall in the West Midlands, were arrested

Rapid Response Mechanism Canada (RRM Canada) has detected a “hack and leak” operation by Iran-linked hacker group, “Handala Hack Team” (Handala). The operation targeted five Iran International journal...

North Korean hackers are saturating the cryptocurrency industry with credible-sounding job offers as part of their campaign to steal digital cash, according to new research, raw data, and interviews.

An advanced threat actor, GRUB1, exploited the integration between Salesloft’s Drift chat agent and Salesforce to gain unauthorized access to Salesforce tenants of Cloudflare and many other companies.

Overview This research examines a new Charming Kitten campaign utilizing advanced impersonation tactics, long-term monitoring of security researchers, and unique infrastructure. This analysis is base...

The Islamic Republic is floating the idea of unblocking Telegram again, and if you believe this is about digital freedom, I have a bridge in Tehran to sell you....

Lab-Dookhtegan has been systematically targeting Iranian infrastructure for months now, and when they reached out about their latest operation, I knew it would ...

Politicians from a second European country are calling for the extradition of the Canadian man behind a notorious, pornographic website which featured deepfake images and videos of celebrities, politi...

The Charming Kitten group has launched a new tactic for targeting Iranian activists. Instead of creating fake identities, they're now directly impersonating a s...

They called themselves cybersecurity experts. They're actually Tehran's digital hit squad.Someone handed me the keys to the kingdom—gigabytes of data ripped f...

What if the June 18, 2025 cyberattack on Iran's largest cryptocurrency exchange wasn't really about destroying $90 million in digital assets, but rather about e...

The revelation - from the criminals responsible - explains why the Co-op is getting back to business faster than M&S.

Fraudsters are able to change their race, facial hair, voice, and more during live video calls with very little effort. Scammers are already fooling the elderly and verification systems.

In another major security incident affecting Iran's telecommunications sector, hackers have gained access to the customer database of Mobile Communication Company of Iran (MCI), also known as Hamrah-e...

Investigating cyber threats and electronic activities of the Iranian regime. Detailed insights into cyber units, security analysis, and tools for combating internet censorship.