ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
nasirsecurity
2 incidentes
2 paises
2 sectores
ransomware LB Ultimo: 2026-06-29
nasirsecurity is a pro-Iranian threat actor that emerged around October 2025, focusing its operations on organizations within the Middle East and Israel. The group's primary motivation is ideological, specifically to confront the Zionist regime and amplify Iranian propaganda during regional conflicts, rather than to achieve financial gain. nasirsecurity distinguishes itself through a strategy of supply chain attacks, often compromising third-party vendors to indirectly impact primary targets. The group consistently overstates the volume of stolen data and misrepresents its source for disinformation purposes. nasirsecurity is also known to operate under several aliases, including Al-Nasir Resistance, Sons of Al-Nusayr, and Sons of Hezbollah Lebanon.
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| DLS / onion | up | yzcpwxuhbkyjnyn4qsf4o5dkvu6m2fyo7dwizmnlutanlmzlos7pa6qd.onion | nasirsecurity |
| DLS / leak site | unknown | ransomware.anggipradana.com | Ransomware Group: nasirsecurity |
Paises afectados
Iran (1)Paises objetivo (SOCRadar)
United Arab Emirates
IsraelIraq
Kuwait
Oman
Saudi Arabia
United StatesSectores atacados
Software (1)
Energy (1)
Sectores objetivo (SOCRadar)
Construction of BuildingsOther Information ServicesSoftware PublishersAccommodationAir TransportationManufacturingConstructionPublic AdministrationOil & GasEducational Services