# Iran Cyber Operations Groups

**[xorl.wordpress.com/2021/05/06/iran-cyber-operations-groups/](https://xorl.wordpress.com/2021/05/06/iran-cyber-operations-groups/)**

[with 2 comments](https://xorl.wordpress.com/2021/05/06/iran-cyber-operations-groups/#comments)


May 6, 2021


Unsurprisingly, after [Russia,](https://xorl.wordpress.com/2021/04/16/russias-cyber-operations-groups/) [US,](https://xorl.wordpress.com/2021/04/18/us-cyber-operations-groups/) [China,](https://xorl.wordpress.com/2021/04/20/chinese-cyber-operations-groups/) [DPRK (North Korea), and](https://xorl.wordpress.com/2021/04/24/north-korea-dprk-cyber-operations-groups/) [EU… Here comes the](https://xorl.wordpress.com/2021/04/28/eu-cyber-operations-groups/)
mapping of the offensive cyber operations groups of Iran that have been attributed to a
known government entity. Just like in the previous posts, sources and change log are
available under the diagram.

If you notice anything missing, incorrect information, mistakes or anything like that please let
me know to update it accordingly.

_Last update: 13 January 2022_


-----

-----

**Sources**

**ChangeLog**

Version 2.0 (13 Jan 2022): Updated MOIS based on US CYBERCOM statement.
Version 1.5 (06 May 2021): Fixed a typo. Added missing “Focus” entries.
Version 1.2 (06 May 2021): Minor fixes (typos, etc.)
Version 1.0 (06 May 2021): First publication.

Written by xorl

May 6, 2021 at 13:00

[Posted in threat intelligence](https://xorl.wordpress.com/category/threat-intelligence/)

## 2 Responses

[Subscribe to comments with RSS.](https://xorl.wordpress.com/2021/05/06/iran-cyber-operations-groups/feed/)

1. how did you miss israel. its a major player. please do for it.

**jonathan**

May 16, 2021 at 12:34

2. I only know of IDF Unit 8200 doing offensive cyber operations in Israel and being linked

with known APT groups.

I have it in my backlog.

**xorl**

May 17, 2021 at 15:17


-----

## Leave a Reply

Fill in your details below or click an icon to log in:

You are commenting using your WordPress.com account. ( Log Out / Change )

You are commenting using your Twitter account. ( Log Out / Change )

FYou are commenting using your Facebook account. ( Log Out / Change )

Cancel
Connecting to %s


-----