ZCyberNews
中文

#iran

10 articles

Twelve articles published between 2026-04-12 and 2026-10-06 examine Iran-related cyber activity. CHOSEN BRICK, APT33, and CL-STA-1178 appear among the top threat actors covered. Reporting spans government, water, critical infrastructure, energy, and telecommunications as the most affected sectors. The United states, Iran, the Middle east, Netherlands, and United kingdom rank among the top affected regions. Ten of the twelve articles carry a high severity rating, reflecting the weight of incidents documented across this period.

Abstract illustration of a network tunnel routed through a code repository interface, representing GitHub-abused command-and-control traffic.
Malware

Blinder Tunnel: Iran-Linked Malware Abuses GitHub C2

Unit 42 ties Iran-nexus CL-STA-1178 to Blinder Tunnel, which hit Iraqi critical infrastructure in March 2026 using fake Dubai Airports lures and GitHub-hosted C2.

4 min readCL-STA-1178
Illustration of a smartphone with messaging app icons and a malware warning symbolHIGH
Malware

CHOSEN BRICK: Iranian Malware Hits Dissidents via Telegram

NCSC, FBI and AIVD warn that Iranian state actors use CHOSEN BRICK malware, delivered via WhatsApp and Telegram social engineering, to spy on dissidents and journalists.

4 min readCHOSEN BRICK
Illustration of a smartphone messaging app conversation being intercepted by surveillance software on a Windows laptopHIGH
Malware

UK, FBI, AIVD Expose CHOSEN BRICK Iranian Spyware

NCSC, FBI and AIVD joint advisory details CHOSEN BRICK, Windows spyware Iranian state actors use to surveil dissidents, activists and journalists via WhatsApp and Telegram...

4 min readCHOSEN BRICK
Handala Group Targets US Troops in Bahrain via WhatsApp ThreatsHIGH
Threat Intel

Handala Group Targets US Troops in Bahrain via WhatsApp Threats

Iran-aligned Handala group sent WhatsApp messages to US service members in Bahrain threatening drone and missile attacks, escalating psychological warfare against military…

2 min readHandala
Iran Conflict Spills Over: Cyber Threats to Critical InfrastructureHIGH
Threat Intel

Iran Conflict Spills Over: Cyber Threats to Critical Infrastructure

ESET warns of increased Iranian cyber activity targeting energy, water, and transportation sectors globally as Middle East conflict escalates.

2 min readAPT33
Iranian Handala Hack Breaches FBI Director Patel's GmailHIGH
Threat Intel

Iranian Handala Hack Breaches FBI Director Patel's Gmail

Iranian state-affiliated group Handala Hack breached FBI Director Patel's personal Gmail account, leaking personal photos and documents after the FBI seized the group's domains.

2 min readHandala Hack
Pre-Stuxnet Malware 'Fast16' Targeted Iranian Precision SoftwareHIGH
Malware

Pre-Stuxnet Malware 'Fast16' Targeted Iranian Precision Software

Security researchers uncovered 'Fast16,' a pre-Stuxnet sabotage malware that targeted high-precision calculation software in Iran, tampering with results and self-propagating.

2 min readFast16
Iranian CyberAv3ngers Escalate Attacks on US Water, Industrial InfrastructureHIGH
Threat Intel

Iranian CyberAv3ngers Escalate Attacks on US Water, Industrial Infrastructure

The Iran-backed threat actor CyberAv3ngers, linked to the IRGC, has evolved from hacktivism to conducting disruptive cyber operations against US water utilities and programmable logic controllers (PLCs).

3 min readCyberAv3ngers
Iran-Linked Hackers Target ICS/SCADA Systems in Critical InfrastructureHIGH
Threat Intel

Iran-Linked Hackers Target ICS/SCADA Systems in Critical Infrastructure

US Gov Warns Iran-Linked Actors Are Manipulating PLCs and SCADA Systems to Disrupt Critical Infrastructure

3 min read
Iranian Internet Outage Exceeds 1,000 Hours Amid State-Imposed CensorshipHIGH
Industry News

Iranian Internet Outage Exceeds 1,000 Hours Amid State-Imposed Censorship

A state-directed internet blackout in Iran has surpassed 1,000 cumulative hours, marking a significant escalation in digital censorship and control tactics.

3 min read

Stay Updated

Get the latest cybersecurity news delivered to your inbox.