Pro-Iran Cyberattacks on Financial Services: 144 Incidents

### Executive summary SOCRadar documents Operation Epic Fury (Feb 28–Apr 6, 2026) as a broad pro‑Iran cyber campaign that produced 1,583 verified incidents — 144 against financial services — driven by a mix of state actors, hacktivists, and criminal operators using DDoS, ransomware infrastructure for destructive outcomes, and pre‑positioned implants (e.g., Dindoor/Fakeset); the campaign escalated in April from disruption to destructive attacks and includes concrete operational guidance for financial defenders.