Iran
Nation-state Active
- Mentions
- 4
- First seen
- 08 Jun 2026
- Last seen
- 09 Nov 2026
Relevant to you · Affects your stack
- Technology:
- Siemens SIMATIC WinCC
- Threat focus:
- espionage / aptindustrial / ot espionage
- Sector / region:
- ManufacturingDACH
Origin
Unattributed
Sources
inferred Confidence high
Profile
Iran has been linked to cyberattacks on cooling systems in France. U.S. federal agencies have broadened alerts on Iran-linked attacks on operational technology. Iranian cyber activities are increasingly focusing beyond critical infrastructure. Despite a ceasefire, Iranian hackers continue their attacks.
Affected vendors
Siemens
Targeted sectors
critical infrastructureCritical InfrastructureCooling systemsOperational technologyCritical infrastructure
Targeted regions
EuropeNorth America
Targeted countries
United StatesFrance
Activity (8 weeks)
Recent activity
- Frankreich: Iran steckt hinter Cyberangriffen auf Kühlsysteme heise security News
- Federal agencies broaden alert on Iran-linked OT attacks The Record from Recorded Future News
- Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure darkreading
- Iran Signed a Ceasefire — Its Hackers Didn't darkreading