Version: 2.00094

Iran-linked cyber operations remain active, with activity driven by distributed, lower-complexity attacks from proxy and hacktivist groups, including phishing, DDoS, data exfiltration, and destructive actions. Intrusions primarily leverage known, unpatched vulnerabilities and exposed edge infrastructure, reflecting a persistent, opportunistic threat posture targeting government, critical infrastructure, and enterprise environments. Iran-linked Cyber Attacks