Iran MOIS Colludes With Criminals to Boost Cyberattacks

Iran's Ministry of Intelligence and Security (MOIS) is increasingly embedding commercial cybercriminal services into state offensive operations—using infostealers (Rhadamanthys), loaders/certificates, RaaS affiliates, and initial-access brokers—to make attribution harder and increase destructive capacity; recent incidents include a wiper attack on a major medical company and an Israeli hospital intrusion attributed to Iranian actors.