Nasir Security’s Hybrid Warfare Against Middle East Energy Infrastructure

Resecurity identifies a new Iranian-linked threat actor, "Nasir Security," that targets smaller vendors, contractors, and engineering firms supporting Middle East energy companies to steal authentic documents and fabricate the appearance of major breaches; the group uses spear-phishing/BEC, credential harvesting of cloud management platforms, public-facing application exploits, and psychological operations (false claims and selective sample releases) to magnify impact and enable future disruptive operations, prompting urgent third-party cybersecurity and vendor risk assessments.