CyberSecurityBoardThreat Intel · CVEs · Products

Tag: Iranian

Attack Groups

Cavern Manticore Threat Actor

Cavern Manticore is an Iranian threat actor linked to the Ministry of Intelligence and Security, associated with the Cavern backdoor framework. It…

Cavern Manticore Iranian Lyceum MOIS
July 6, 2026
Attack Groups

Lyceum Threat Actor

Lyceum is a subgroup of the Iranian OilRig group, involved in cyber espionage. Group-IB notes a low-confidence overlap with the HollowGraph campaign.

espionage Iranian Lyceum OilRig
July 6, 2026
Attack Groups

OilRig Threat Actor

OilRig is an Iranian state-sponsored cyber espionage group active since 2014, targeting various sectors globally. Lyceum is a subgroup of OilRig.

espionage Iranian OilRig
July 6, 2026
Malware

Cavern Backdoor Framework

Cavern is a modular backdoor framework documented by Check Point, attributed to an Iranian Ministry of Intelligence and Security-linked actor called Cavern…

backdoor Cavern Iranian Lyceum
July 6, 2026
Attack Groups

MuddyWater Threat Actor

MuddyWater is an Iranian state-sponsored cyber espionage group known for targeting government and private sectors in the Middle East and elsewhere. It…

espionage Iranian MuddyWater
June 25, 2026