Iranian APT Infrastructure in Focus: Mapping State-Aligned Clusters During Geopolitical Escalation

This Hunt.io intelligence brief maps Iranian state-linked intrusion infrastructure—IP ranges, hosting clusters, TLS/certificate reuse, malware artifacts (e.g., reset.ps1, TameCat), and active C2s (including a Sliver instance)—providing IOCs and monitoring recommendations to help U.S. and Israeli organizations detect and track these campaigns earlier in the intrusion lifecycle.