Pro-Iranian Nasir Security is targeting energy companies in the Gulf

Resecurity reports that a relatively new, likely Iran-linked actor named Nasir Security has been targeting energy-sector companies in the Gulf via supply-chain intrusions and business email compromise, stealing authentic vendor documents (contracts, schemes, risk assessments) that could enable further cyber or physical attacks; observed TTPs include spearphishing/impersonation, exploitation of public-facing apps, and exfiltration from insecure cloud storage, and the report warns of increased influence operations and false flags during the conflict.