🇮🇷Iran
Unknown•Ranked #34 of 199•score 10089% vs global avg·Top 17%
Ransomware
35
Top: arvinclub
Defacements
0
No defacements
Critical incidents
3
High-severity ransomware
Severity breakdown
- Crit39%
- High26%
- Med3086%
- Low00%
Ransomware activity over time
3 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
- CVE-2026-97229
GitLab: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Added 2026-10-29
Recent ransomware incidents in Iran
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-04 | daralteb.com | Healthcare | krybit | MEDIUM |
| 2026-10-04 | daralteb.com | Healthcare | krybit | MEDIUM |
| 2026-09-16 | Roshd Sanat | Manufacturing | Wallstreet | MEDIUM |
| 2026-08-05 | IRCO.COM | Not Found | clop | CRITICAL |
| 2026-07-06 | azarestan.com | Not Found | apt73 | MEDIUM |
| 2026-06-10 | Nobani Co | Not Found | Deadlock | MEDIUM |
| 2026-05-12 | Shajarpak Securities | Financial Services | thegentlemen | MEDIUM |
| 2026-04-27 | sansirostadium.com | Hospitality and Tourism | apt73 | MEDIUM |
| 2026-03-31 | IranWire | Technology | handala | MEDIUM |
| 2026-03-17 | Who is VahidOnline? | Not Found | handala | MEDIUM |
Top targeted sectors
- Not Found9
- Healthcare4
- Manufacturing4
- Technology3
- Agriculture and Food Production3
Threat actors active here
- arvinclub8
- handala4
- krybit2
- apt732
- stormous2