Iranian APTs increased activity against US industries in late spring, researchers say

Nozomi Networks reported a significant uptick in Iran-linked cyber activity against U.S. organizations—28 incidents observed in May–June versus 12 in the prior period—with an emphasis on transportation and manufacturing. The report attributes activity to multiple Iranian APTs (notably MuddyWater and APT33) and warns that FoxKitten is incentivizing ransomware affiliates to target Iran’s adversaries, increasing risk to critical infrastructure operators.