Iran's 'Cyber Centers' Dodge Sanctions to Sell Cyber Operations

Recorded Future analysis and leaked documents indicate that several Iran-based cybersecurity contractors (for example, Emen Net Pasargad and Mahak Rayan Afraz) operate as commercial fronts tied to the IRGC, supporting offensive cyber operations against democratic institutions, industrial control systems, critical infrastructure (including water facilities), and major organizations; the report also cites a hospital data theft of roughly 500 GB, discusses U.S. sanctions and contractor rebranding, and warns of continued activity using cybercrime and hacktivist personas to obfuscate attribution.