Leaks and Revelations: A Web of IRGC Networks and Cyber Companies

Insikt Group analysis exposes an IRGC-affiliated network of cyber contractors conducting espionage, ransomware (e.g., Moses Staff, N3tW0rm, Agrius), information operations, and exporting surveillance/offensive technologies targeting governments, media, NGOs, critical infrastructure, and healthcare; multi-year leaks and financial traces link contractors to the IRGC Quds Force and cross-border activities in Iraq, Syria, and Lebanon.