Cyber-Enabled Maritime Sanctions Evasion

This Recorded Future/Insikt Group-style investigation documents a network of at least three clusters of inauthentic maritime websites used to support sanctions evasion by the Iranian and Russian shadow fleets; the infrastructure impersonates national registries, classification societies, and training centers, automates fraudulent certificate generation (including QR-linked PDFs), and is tied to numerous sanctioned vessels and service providers, with over 36 domains and multiple vessel IoCs identified.