All actors

Cyber Toufan

Linked to Iran by two sources.

Reports
6
Last reported
Known CVEs
5
Origin
Iran
ID
cyber-toufan
Sources
MISPMalpedia
Merge evidence
1 alias match

Reports per quarter

  1. 2025 Q2: 1 report
  2. 2025 Q3: no reports
  3. 2025 Q4: no reports
  4. 2026 Q1: 1 report
  5. 2026 Q2: 4 reports
Dated reports, 2025 Q2 to 2026 Q2.

Techniques seen in the last two years

Show all 12 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

Newest first. Details opens the report in Explore.