Threat actor nation
Iran
47 scored AI-enabled operations attributed to Iran
Overview
Written by the AIRE team.
Primary Threat Groups:
STORM-0817, CyberAv3ngers, Crimson Sandstorm, APT42
Strategic Objectives:
- Intelligence advantage. Gather political, technical, and industrial information from global targets.
- Operational disruption. Target key sectors to impose operational or economic pressure.
- Cross-sector impact. Extend operations across defense, maritime, healthcare, transportation, and technology sectors.
AI capabilities
Click a capability to filter the operations.
Artifact Development20
Social Engineering10
Reconnaissance9
Intrusion, Evasion & Persistence2
202420252026
Most active actors
Click an actor to see its operations.
Sophistication by quarter
Each dot is one operation attributed to Iran; the dashed line follows the 90th percentile. Click a dot to see the incident.
Operations
22 in total, highest sophistication first.
Next profile
China · 100 operations
Only scored operations appear on this page; sub-incidents are counted under their parent campaign. Scores are from the run of 30 Oct 2026.