Threat Intelligence Report: IRGC-Affiliated OT/IoT Malware Evolution (opens in new tab)

Executive Assessment Iran-linked operational technology (OT) cyber activity has progressed from opportunistic access and symbolic defacement into a more structured, implant-enabled capability set. The inflection point is IOCONTROL, a custom Linux/ARM OT-IoT backdoor attributed to CyberAv3ngers, a persona assessed as affiliated with the IRGC Cyber-Electronic Command. IOCONTROL introduces durable persistence, encrypted configuration (AES-class schemes), MQTT-based […]