Threats · 242 days ago

Iran-aligned actors ramp up phishing and disruption

Unit 42 observed a surge in Iranian-aligned phishing, DDoS and hack-and-leak operations following Feb. 28 U.S.–Israel strikes.

Timeline

• Mar 3 Reported by Unit 42

Sources

1 source covering this story

• Unit 42 Mar 3

  Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17)

  Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime.

Part of the PlainSec briefing for 2026-03-27

Editions

• Briefing for 2026-03-27

Related stories

• TeamPCP injects credential-stealer into LiteLLM package
• China‑linked Red Menshen embeds stealthy implants in telecom cores
• All Checkmarx action tags overwritten in TeamPCP supply-chain compromise