APT Explorer

All actors

CyberAv3ngers

Also reported as Cyber Av3ngers, Shahid Kaveh Group and Soldiers of Soloman. Linked to Iran by three sources.

Reports
21
Last reported
Known CVEs
8
Origin
Iran
ID
cyber-av3ngers
Sources
ATT&CKMISPETDAMalpedia
Merge evidence
4 alias matches

Reports per quarter

Dated reports, 2021 Q3 to 2026 Q2.

Techniques seen in the last two years

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Breaches by Iran-affiliated hackers spanned multiple U.S. states, federal agencies say

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. Threat Actor Activity Related to the Iran Conflict

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Two-day water outage in remote Irish region caused by pro-Iran hackers

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. (TLP:CLEAR) Water Utility Control System Cyber Incident Advisory: ICS/SCADA Incident at Municipal Water Authority of Aliquippa (Updated November 30, 2023) - WaterISAC

    date ORKL added it ORKL

    Archived copy on ORKL Details

  5. CyberAv3ngers – Rewards For Justice

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. US offering $10 million for info on Iranian hackers behind IOControl malware

    date ORKL added it ORKL

    Archived copy on ORKL Details

  7. Pennsylvania water authority hit with cyberattack allegedly tied to pro-Iran group

    date ORKL added it ORKL

    Archived copy on ORKL Details

  8. 2023 Recap - Cyber Activity in the Gaza Conflict

    date ORKL added it ORKL

    Archived copy on ORKL Details

  9. Telegram Hacktivist Activity Timeline of Iran - Israel & US War

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. 2026_YIR_ExecutiveBriefing%20O_G.pdf?hsLang=en

    file creation date ORKL

    Archived copy on ORKL Details

Show all 21 reports Show fewer

  1. How hacktivist cyber operations surged amid Israeli-Iranian conflict

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interest

    file creation date ORKL

    Archived copy on ORKL Details

  3. IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities | CISA

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. team82_iocontrol.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. IOControl Malware: What’s New, What’s Not?

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. New IOCONTROL malware used in critical infrastructure attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Inside a New OT/IoT Cyberweapon: IOCONTROL

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. US offers $10 million bounty for members of Iranian hacking gang

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. A hack in hand is worth two in the bush

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. Reflections of the Israel-Palestine Conflict on the Cyber World

    Malpedia library date ORKL

    Archived copy on ORKL Details

  11. Iran's Secret Cyber Files

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

Newest first. Details opens the report in Explore.