🇮🇷Iran
Unknown•Ranked #33 of 188•score 10089% vs global avg·Top 18%
Ransomware
30
Top: arvinclub
Defacements
0
No defacements
Critical incidents
2
High-severity ransomware
Severity breakdown
- Crit27%
- High27%
- Med2687%
- Low00%
Ransomware activity over time
4 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2025-67038
Lantronix: Lantronix EDS5000 Code Injection Vulnerability
Added 2026-06-23
- CVE-2026-34910
Ubiquiti: Ubiquiti UniFi OS Improper Input Validation Vulnerability
Added 2026-06-23
- CVE-2026-34909
Ubiquiti: Ubiquiti UniFi OS Path Traversal Vulnerability
Added 2026-06-23
- CVE-2026-34908
Ubiquiti: Ubiquiti UniFi OS Improper Access Control Vulnerability
Added 2026-06-23
- CVE-2026-20253
Splunk: Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Added 2026-06-18
Recent ransomware incidents in Iran
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-06-10 | Nobani Co | Not Found | Deadlock | MEDIUM |
| 2026-05-12 | Shajarpak Securities | Financial Services | thegentlemen | MEDIUM |
| 2026-04-27 | sansirostadium.com | Hospitality and Tourism | apt73 | MEDIUM |
| 2026-03-31 | IranWire | Technology | handala | MEDIUM |
| 2026-03-17 | Who is VahidOnline? | Not Found | handala | MEDIUM |
| 2026-03-06 | IDF in Farsi | Public Sector | handala | MEDIUM |
| 2025-12-25 | behranlift.com | Manufacturing | lockbit5 | CRITICAL |
| 2025-12-22 | taminsho.com | Not Found | benzona | MEDIUM |
| 2025-11-22 | Parsirang | Agriculture and Food Production | dragonforce | MEDIUM |
| 2025-11-15 | SWISS ROSE Factory | Manufacturing | nova | MEDIUM |
Top targeted sectors
- Not Found7
- Technology3
- Manufacturing3
- Agriculture and Food Production3
- Business Services3
Threat actors active here
- arvinclub8
- handala4
- stormous2
- Deadlock1
- thegentlemen1