New Offensive OT Framework Targeting Energy Infrastructure Emerges on Dark Web

Lab52 researchers discovered a TOR-listed offensive OT framework offered by a group calling itself “APT IRAN” and potentially linked to the IRGC; the toolkit claims granular control over power distribution by targeting industrial protocols (IEC 61850, IEC 61970). The sellers advertise capabilities such as selective circuit control, load-balancing disruption, and equipment stress testing, and a demo aimed at the United States was announced; researchers caution the resource might be a scam or honeytoken but note details and behavior that suggest a credible, high-risk capability against energy and military control networks.