■■■■□ Iran 🇮🇷 | Lemon Sandstorm.
An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East that lasted nearly two years.
https://www.fortinet.com/blog/threat-research/fortiguard-incident-response-team-detects-intrusion-into-middle-east-critical-national-infrastructure
https://thehackernews.com/2024/08/us-agencies-warn-of-iranian-hacking.html
https://thehackernews.com/2025/05/iranian-hackers-maintain-2-year-access.html