Iranian APT Groups Intensify Cyberattacks on Critical Infrastructure Amid Rising Geopolitical Tensions

During recent Middle Eastern kinetic escalation, Iran-linked APTs (MuddyWater/APT34, OilRig, APT33, UNC1549) increased cyber operations against critical infrastructure—particularly energy, transportation, aerospace, defense, and telecom—producing a notable spike in alerts. The report highlights common TTPs (spear-phishing, credential theft, web shells, living-off-the-land binaries, password spraying, scanning), elevated regional vulnerability severity and EPSS exposure, and recommends continuous OT monitoring, updated threat feeds, prompt patching, credential hygiene, and incident response preparation.