Sysdig Threat Bulletin: Iranian Cyber Threats

Sysdig TRT warns of an anticipated increase in cyber operations by Iranian state-sponsored APTs and pro-Iranian hacktivists following U.S. strikes, providing profiles of groups (APT35, APT33, Pioneer Kitten), their TTPs targeting cloud and Linux environments (credential theft, web shells, tunneling, malware and ransomware use), and prioritized detections and mitigations (MFA, patch exposed appliances, web shell/runtime detections, monitor tunneling/proxy activity, verify backups).