Palo Alto Unit 42 Threat Brief: Iranian Cyber Ecosystem Expands to 60+ Hacktivist Groups

Unit 42's threat brief catalogs the expansion of Iran's offensive cyber ecosystem to over 60 identified hacktivist groups since the war began. The ecosystem includes MOIS-operated Void Manticore personas and pro-Russian collectives formally joining Iran's cyber coalition. Primary targets include banking/fintech (40% of traffic), defense contractors, and critical infrastructure.