New Android spyware variants of DCHSpy tied to Iran’s Intelligence Agency.

New Android spyware variants of DCHSpy tied to Iran’s Intelligence Agency.

Security researchers have discovered four new variants of Android spyware, collectively known as DCHSpy, that have been directly linked to Iran’s Ministry of Intelligence and Security (MOIS). These findings, surfacing in the wake of heightened regional tensions following Israeli strikes on Iranian sites, underscore the ongoing evolution and sophistication of Iranian cyber-espionage operations.
Iranian-sponsored fatwa crowdfunding campaign to assassinate Donald Trump surpasses $42 million and continues to grow. Here’s what we know about the thaar.ir WordPress website that is hosting it.

Iranian-sponsored fatwa crowdfunding campaign to assassinate Donald Trump surpasses $42 million and continues to grow. Here’s what we know about the thaar.ir WordPress website that is hosting it.

An Iranian-sponsored crowdfunding campaign continues to grow, aiming to raise funds for the assassination of U.S. President Donald Trump. This campaign is primarily linked to hardline Iranian clerics and groups, and has gained significant attention due to its scale and explicit purpose.
Iran-aligned BladedFeline cyber-espionage campaign targets government entities in Iraq and Kurdistan.

Iran-aligned BladedFeline cyber-espionage campaign targets government entities in Iraq and Kurdistan.

A sophisticated and long-running cyber-espionage campaign, attributed to an Iran-aligned threat group known as “BladedFeline,” has been observed targeting government entities in Iraq and the Kurdistan Regional Government (KRG), according to new research by cybersecurity firm ESET. Since its initial activities in 2017, BladedFeline has significantly evolved its toolset and operational tactics, posing a persistent threat to sensitive government operations in the region.
Iranian hackers claim to possess about 100 gigabytes of emails from Trump’s circle.

Iranian hackers claim to possess about 100 gigabytes of emails from Trump’s circle.

Pro-Iran hackers have recently threatened to release a large trove of emails allegedly stolen from individuals closely associated with former President Donald Trump. U.S. federal officials have characterized this as a “calculated smear campaign” and dismissed the threat as “digital propaganda” designed to undermine Trump and other government officials. However, previously leaked documents by the group were authenticated and included communications about campaign strategy and legal matters involving Stormy Daniels
CISA and FBI issue warning to remain vigilant during continued political tensions with Iran.

CISA and FBI issue warning to remain vigilant during continued political tensions with Iran.

Today, CISA, in collaboration with the Federal Bureau of Investigation (FBI), the Department of Defense Cyber Crime Center (DC3), and the National Security Agency (NSA), released a joint Fact Sheet titled “Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interest.” This document is a direct response to increasing cyber activity from Iranian state-sponsored or affiliated threat actors, including hacktivists and government-linked groups, who are expected to escalate their operations due to recent geopolitical events.
Researchers see dramatic escalation in cyberthreats linked to Israel-Iran conflict – Here’s how to prepare for cyberwar.

Researchers see dramatic escalation in cyberthreats linked to Israel-Iran conflict – Here’s how to prepare for cyberwar.

As expected, there has been clear, well-documented evidence of a dramatic escalation in cyberthreats linked to the ongoing Israel-Iran conflict. This surge includes both the frequency and sophistication of attacks, with direct implications for Israel, Iran, their allies, and potentially the United States' infrastructure.
Computer hacker carrying Iran flag

Full list of Iran IPv4 IP address blocks (IP Blocks).

Iran has over 11 million IPv4 addresses allocated, distributed across numerous IP blocks assigned to internet providers, businesses, and organizations. These IP address ranges are used for internet connectivity within the country and are regularly updated by regional internet registries and various IP geolocation databases.