Who Is Behind Pro-Ukrainian Cyberattacks on Iran?

The report describes Nebula, a pro‑Ukrainian hacktivist group that has conducted DDoS and intrusion operations against Russian targets and unexpectedly breached Iran's Raykasoft in October, claiming to have exfiltrated and dropped over 10TB of medical data and destroyed servers; the report also documents technical artifacts (Meterpreter shells, a likely LimeNet source IP and a Cobalt Strike beacon) and assesses this as an opportunistic, but concerning, deviation from other Ukrainian-aligned groups' targeting norms.