nasir security Ransomware Group
Ransomware group profile
Description
Nasir Security is a politically motivated cybercriminal group that emerged in late 2025, linked to Iran and operating under various aliases. Their operations focus on cyber warfare and propaganda, utilizing tactics such as data theft, supply chain attacks, and disinformation strategies rather than financial gain alone.
Key insights
- •Uses business email compromise and spear phishing to gain initial access.
- •Focuses on supply chain attacks to evade direct defenses of larger organizations.
- •Employs insecure cloud storage services for data exfiltration.
- •Engages in direct and double extortion, leveraging data leak sites.
- •Combines propaganda with cyber operations to exaggerate the scale of breaches.
Threat Level & Status Breakdown
For nasir security · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for nasir security in the selected period
Intelligence
IOCs, YARA/Sigma rules, and related families for nasir security
- nasir.cc
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for nasir security
T1486
T1486
T1490
T1490
T1021
T1021
T1562
T1562
T1078
T1078
T1547
T1547
T1059
T1059
T1566
T1566
T1530
T1530
T0819
T0819
T1656
T1656
Victims(12)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Yad Vashem Museum Hacked! | Israel | Claimed | 4 months ago | |
| Kuwait Ministry Of Interior Hacked! | Kuwait | Claimed | 4 months ago | |
| Dubai Airport - Data Leaked | United Arab Emirates | Claimed | 4 months ago | |
| UAE Customs (Federal Customs Authority) - ACCESS GRANTED ! | United Arab Emirates | Claimed | 5 months ago | |
| The Most Massive Hack Operation in UAE History. It's Just The Beginning of Nightmares... | United Arab Emirates | Claimed | 5 months ago | |
| Al-Safi Oil Company (PURE IN) Hacked | Saudi Arabia | Claimed | 5 months ago | |
| Rumaila Operating Organisation Compromised | — | Claimed | 5 months ago | |
| Oman CC Energy Development Hacked | Oman | Claimed | 5 months ago | |
| Dubai Petroleum Breached | United Arab Emirates | Claimed | 5 months ago | |
| Mission Announcement | — | Claimed | 5 months ago | |
| First Statment | Lebanon | Claimed | 10 months ago | |
| Taldor Hacked | Israel | Claimed | 10 months ago |
Affected countries(7)
Countries where this group has been reported to target or leak victims.