An update from Assura's SOC team on Iranian cyber threat activity tied to ongoing U.S./Israeli geopolitical hostilities. The team proactively identified Iranian-sponsored IOCs from groups like MuddyWater, Charming Kitten, and others, added CIDR blocks to their Threat Intelligence Platform, and detected attempted connections on high-numbered ports—none successful. IOCs are being shared via AlienVault OTX. Recommendations include enforcing MFA, reviewing external exposure, reinforcing phishing awareness, and validating incident response readiness.
Sort: