Sysdig Threat Bulletin: Iranian Cyber Threats

Sysdig TRT warns of a likely spike in cyber activity by Iranian state-sponsored APTs and aligned hacktivists following U.S. strikes, profiling groups such as APT35, APT33, and Pioneer Kitten, describing their use of credential theft, web shells, tunneling through cloud infrastructure, and ransomware/wiper workflows, and providing concrete cloud- and Linux-focused detection and mitigation guidance.