Iranian state-backed ransomware actors
Unknown Dormant
- Mentions
- 1
- First seen
- 03 Jun 2026
- Last seen
- 03 Jun 2026
Relevant to you · Relevant
- Threat focus:
- ransomware
Origin
Unattributed
Profile
Iranian state-backed ransomware actors use the Nobitex crypto exchange for their operations. The U.S. has imposed sanctions on Nobitex to disrupt these activities.