Attribution
Iran — assessed state-sponsored destructive operators (medium-high confidence; a campaign/tool cluster rather than a single named group)
Attribution confidence
medium
MENA targeting
Saudi Arabia, Gulf states
Sectors
Energy, oil & gas, government
Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Saudi Arabia, Gulf states (Energy, oil & gas, government sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.