Pro-Iranian Nasir Security is Targeting The Energy Sector in the Middle East

Resecurity tracks a new pro‑Iranian cybercriminal group, Nasir Security, that targets energy sector supply‑chain vendors (contractors, engineering/safety firms) using BEC/spearphishing, impersonation, and exploitation of public‑facing applications to exfiltrate documents and post pseudo‑leaks on a clearnet and TOR DLS; claims of large breaches appear exaggerated, many files likely originated from third parties, attribution is uncertain, and the activity mixes intelligence collection with propaganda/false flags.