Iran linked to yet another state-sponsored ransomware operation through a contracting company based in the country, according to new analysis. The initiative is said to have kickstarted sometime between July 2020 and early September 2020. It’s not immediately clear if these attacks went ahead as planned and whom they targeted. The move could be a “subterfuge technique” to mimic the tactics, techniques, and procedures of other financially motivated cybercriminal ransomware groups so as to make attribution harder and better blend in with the threat landscape.
Source: https://thehackernews.com/2021/05/researchers-uncover-iranian-state.html