[Unnamed groups: Iran] - Threat Group Cards: A Threat Actor
Encyclopedia
Archived: 2026-04-05 21:04:13 UTC
Home > List all groups > [Unnamed groups: Iran]
 APT group: [Unnamed groups: Iran]
Names [Unnamed groups: Iran] (?)
Country Iran
Sponsor State-sponsored
Motivation Information theft and espionage
First seen 2019
Description
These are reported APT activities attributed to a country, but not to an individual
threat group.
Observed
Sectors: Aviation, Government, Industrial, IT, Telecommunications.
Countries: Afghanistan, Australia, Azerbaijan, Bahrain, Colombia, Dubai, Egypt,
Ethiopia, Fiji, Hong Kong, India, Indonesia, Iraq, Israel, Kenya, Kuwait,
Kyrgyzstan, Lebanon, Malaysia, Mauritius, Morocco, New Zealand, Oman,
Pakistan, Philippines, Qatar, South Africa, Sri Lanka, Syria, Thailand, Turkey, UAE,
USA.
Tools used
Operations performed
2017
I Spy With My Little Eye: Uncovering an Iranian
Counterintelligence Operation
<https://cloud.google.com/blog/topics/threat-intelligence/uncovering-iranian-counterintelligence-operation>
Nov 2023
Pennsylvania water authority hit with cyberattack allegedly tied to
pro-Iran group
<https://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group>
Nov 2023
North Texas water utility serving 2 million hit with cyberattack
<https://therecord.media/north-texas-water-utility-cyberattack>
https://apt.etda.or.th/cgi-bin/showcard.cgi?u=01106777-4eb0-4a37-b7d3-c8ca539e2403
Page 1 of 3

Dec 2023
Florida water agency latest to confirm cyber incident as feds warn of
nation-state attacks
Counter operations
May 2019
On Friday May 5th, dozens of confidential documents labeled as
“secret” were leaked on Telegram.
Feb 2024
Treasury Sanctions Actors Responsible for Malicious Cyber
Activities on Critical Infrastructure
Apr 2024
Treasury Designates Iranian Cyber Actors Targeting U.S. Companies
and Government Agencies
Aug 2024
Disrupting a covert Iranian influence operation
Sep 2024
Three IRGC Cyber Actors Indicted for ‘Hack-and-Leak’ Operation
Designed to Influence the 2024 U.S. Presidential Election
Jan 2025
Treasury Sanctions Entities in Iran and Russia That Attempted to
Interfere in the U.S. 2024 Election
Information

joint-odni-fbi-and-cisa-statement-on-iranian-election-influence-efforts>
Last change to this card: 16 August 2025
Download this actor card in PDF or JSON format
Source: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=01106777-4eb0-4a37-b7d3-c8ca539e2403
https://apt.etda.or.th/cgi-bin/showcard.cgi?u=01106777-4eb0-4a37-b7d3-c8ca539e2403
Page 3 of 3