# Iran’s Most Advanced Cyber Attack Yet

December 7, 2023

https://research.checkpoint.com/2023/irans-most-advanced-cyber-attack-yet/

For years now, Iran’s state-sponsored hackers have been some of the most prolific in the world. But prolific does not necessarily mean sophisticated — its attacks haven’t quite impressed in the way that the U.S., Russia, and China’s do. But in a campaign recently uncovered by CheckPoint, one Iranian APT unleashed tools and tactics unlike anything we’ve seen from the country before. If before they were at the kids’ table, this latest campaign suggests that they might have just moved up.

### RELATED PUBLICATIONS

- **“The Next WannaCry” Vulnerability is Here**  
August 11, 2017

- **“Handala Hack” – Unveiling Group’s Modus Operandi**  
March 12, 2026

- **“The Turkish Rat” Evolved Adwind in a Massive Ongoing Phishing Campaign**  
February 17, 2020

- **“The Next WannaCry” Vulnerability is Here**  
August 11, 2017

- **“Handala Hack” – Unveiling Group’s Modus Operandi**  
March 12, 2026

- **“The Turkish Rat” Evolved Adwind in a Massive Ongoing Phishing Campaign**  
February 17, 2020

- **“The Next WannaCry” Vulnerability is Here**  
August 11, 2017