The MOIS cyber group is a network of threat actors directed by Iran's Ministry of Intelligence and Security. They conduct cyber espionage to support Iran's political goals, including harming American civilians. The group has been linked to breaches of U.S. critical infrastructure and government offices, and is motivated by both state objectives and personal enrichment.