Record · corpus.blog/posts/01a0d4a4-941a-7270-8f8a-12717d7ab318

Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization

Unit 42 · published 16 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 14
Words captured: 1,572

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.cfr.org/cyber-operations/compromise-of-saudi-aramco-and-rasgas

cfr.org

https://www.computerworld.com/article/1526242/kill-timer-found-in-shamoon-malware-suggests-possible-connection-to-saudi-ar.html

computerworld.com

https://thehackernews.com/2019/12/zerocleare-data-wiper-malware.html

thehackernews.com

https://www.darkreading.com/vulnerabilities-threats/dustman-attack-underscores-iran-s-cyber-capabilities

darkreading.com

https://www.nozominetworks.com/blog/agrius-in-focus-dissecting-a-web-shell

nozominetworks.com

https://www.sentinelone.com/labs/from-wiper-to-ransomware-the-evolution-of-agrius/

sentinelone.com

https://www.eset.com/hk/about/newsroom/press-releases/news/fantasy-a-new-agrius-wiper-deployed-through-a-supply-chain-attack0/

eset.com

https://cyberint.com/blog/threat-intelligence/handala-hack-what-we-know-about-the-rising-threat-actor/

cyberint.com

https://www.securityjoes.com/post/bibi-linux-a-new-wiper-dropped-by-pro-hamas-hacktivist-group

securityjoes.com

https://arcticwolf.com/resources/blog/bibi-wiper-used-in-the-israel-hamas-war-now-runs-on-windows/

arcticwolf.com

https://www.forrester.com/blogs/the-stryker-attack-enterprise-resiliency-plans-cant-ignore-uem/

forrester.com

https://www.paloaltonetworks.com/resources/datasheets/cortex-cloud-ciem

paloaltonetworks.com

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Cortex-Cloud-Identity-Security

docs-cortex.paloaltonetworks.com

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Privileged-Security-Admin

docs-cortex.paloaltonetworks.com

Elsewhere on unit42.paloaltonetworks.com (9)

Insights: Increased Risk of Wiper Attacks Read at the source ↗

unit42.paloaltonetworks.com

Curious Serpens’ FalseFont Backdoor: Technical Analysis, Detection and Prevention Read at the source ↗

unit42.paloaltonetworks.com

Threat Actor Groups Tracked by Palo Alto Networks Unit 42 (Updated Aug. 1, 2025) Read at the source ↗

unit42.paloaltonetworks.com

Second Wave of Shamoon 2 Attacks Identified Read at the source ↗

unit42.paloaltonetworks.com

Shamoon 3: Modified Open-Source Wiper Contains Verse from the Quran Read at the source ↗

unit42.paloaltonetworks.com

Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors Read at the source ↗

unit42.paloaltonetworks.com

Muddying the Water: Targeted Attacks in the Middle East Read at the source ↗

unit42.paloaltonetworks.com

Boggy Serpens Threat Assessment Read at the source ↗

unit42.paloaltonetworks.com

Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17) Read at the source ↗

unit42.paloaltonetworks.com