Attribution
Iran — assessed state-aligned espionage, linked to Shamoon destructive operations (medium confidence; no MITRE Group ID)
Attribution confidence
medium
MENA targeting
Saudi Arabia, Gulf states
Sectors
Government, energy, aviation, education
Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Saudi Arabia, Gulf states (Government, energy, aviation sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.