🇮🇷Iran
Unknown•Ranked #34 of 195•score 10089% vs global avg·Top 17%
Ransomware
33
Top: arvinclub
Defacements
0
No defacements
Critical incidents
3
High-severity ransomware
Severity breakdown
- Crit39%
- High26%
- Med2885%
- Low00%
Ransomware activity over time
3 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2025-39964
Linux: Linux Kernel Race Condition Vulnerability
Added 2026-09-18
- CVE-2026-53266
Linux: Linux Kernel Out-of-Bounds Write Vulnerability
Added 2026-09-18
- CVE-2025-39682
Linux: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Added 2026-09-18
- CVE-2026-58704
Google: Google Pixel Improper Authorization Vulnerability
Added 2026-09-16
- CVE-2026-76460
Cisco: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Added 2026-09-16
Recent ransomware incidents in Iran
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-09-16 | Roshd Sanat | Manufacturing | Wallstreet | MEDIUM |
| 2026-08-05 | IRCO.COM | Not Found | clop | CRITICAL |
| 2026-07-06 | azarestan.com | Not Found | apt73 | MEDIUM |
| 2026-06-10 | Nobani Co | Not Found | Deadlock | MEDIUM |
| 2026-05-12 | Shajarpak Securities | Financial Services | thegentlemen | MEDIUM |
| 2026-04-27 | sansirostadium.com | Hospitality and Tourism | apt73 | MEDIUM |
| 2026-03-31 | IranWire | Technology | handala | MEDIUM |
| 2026-03-17 | Who is VahidOnline? | Not Found | handala | MEDIUM |
| 2026-03-06 | IDF in Farsi | Public Sector | handala | MEDIUM |
| 2025-12-25 | behranlift.com | Manufacturing | lockbit5 | CRITICAL |
Top targeted sectors
- Not Found9
- Manufacturing4
- Technology3
- Agriculture and Food Production3
- Business Services3
Threat actors active here
- arvinclub8
- handala4
- apt732
- stormous2
- Wallstreet1