🇮🇷Iran
Unknown•Ranked #34 of 192•score 10089% vs global avg·Top 18%
Ransomware
31
Top: arvinclub
Defacements
0
No defacements
Critical incidents
2
High-severity ransomware
Severity breakdown
- Crit26%
- High26%
- Med2787%
- Low00%
Ransomware activity over time
3 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-8037
Progress: Progress LoadMaster Command Injection Vulnerability
Added 2026-08-07
- CVE-2026-63077
JetBrains: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
Added 2026-08-05
- CVE-2026-18556
N-able: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
Added 2026-08-04
- CVE-2026-34486
Apache: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Added 2026-08-04
- CVE-2026-9198
IBM: IBM Langflow Code Injection Vulnerability
Added 2026-08-04
Recent ransomware incidents in Iran
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-07-06 | azarestan.com | Not Found | apt73 | MEDIUM |
| 2026-06-10 | Nobani Co | Not Found | Deadlock | MEDIUM |
| 2026-05-12 | Shajarpak Securities | Financial Services | thegentlemen | MEDIUM |
| 2026-04-27 | sansirostadium.com | Hospitality and Tourism | apt73 | MEDIUM |
| 2026-03-31 | IranWire | Technology | handala | MEDIUM |
| 2026-03-17 | Who is VahidOnline? | Not Found | handala | MEDIUM |
| 2026-03-06 | IDF in Farsi | Public Sector | handala | MEDIUM |
| 2025-12-25 | behranlift.com | Manufacturing | lockbit5 | CRITICAL |
| 2025-12-22 | taminsho.com | Not Found | benzona | MEDIUM |
| 2025-11-22 | Parsirang | Agriculture and Food Production | dragonforce | MEDIUM |
Top targeted sectors
- Not Found8
- Technology3
- Manufacturing3
- Agriculture and Food Production3
- Business Services3
Threat actors active here
- arvinclub8
- handala4
- apt732
- stormous2
- Deadlock1