Ransomware Intelligence

Ransomware needs a way in. Stolen credentials are the cheapest one.

Check Your Exposure

nasirsecurity Ransomware Group

Ransomware group profile

10Victims
LebanonSource country
38Impact score

Description

Nasir Security is a politically motivated cybercriminal group that emerged in late 2025, linked to Iran and operating under various aliases. Their operations focus on cyber warfare and propaganda, utilizing tactics such as data theft, supply chain attacks, and disinformation strategies rather than financial gain alone.

Key insights

  • Uses business email compromise and spear phishing to gain initial access.
  • Focuses on supply chain attacks to evade direct defenses of larger organizations.
  • Employs insecure cloud storage services for data exfiltration.
  • Engages in direct and double extortion, leveraging data leak sites.
  • Combines propaganda with cyber operations to exaggerate the scale of breaches.

Threat Level & Status Breakdown

For nasirsecurity · Based on incidents in selected period

1.4threat level
Aggressiveness2.5/ 10
Lethality0/ 10
Criticality1.7/ 10

Status Breakdown

Claimed100.0%10
First seenOct 2025
Last seenApr 2026
Avg ransom
Payment rate
Statusactive
Sophistication0
Last updatedAug 28, 2026

Recent activity

Monthly attack count for nasirsecurity in the selected period

10Total attacks
7peak in Mar
3.3avg / month
↑ 1 vs first month
OctMarApr02468

Intelligence

IOCs, YARA/Sigma rules, and related families for nasirsecurity

  1. nasir.cc
View full IOC feed1 total

TTPs & Attack Vectors

Tools, initial access, and MITRE ATT&CK techniques for nasirsecurity

Other

T1486

T1486

T1490

T1490

T1021

T1021

T1562

T1562

T1078

T1078

T1547

T1547

T1059

T1059

T1566

T1566

T1530

T1530

T0819

T0819

T1656

T1656

Victims(10)

IsraelEducationyadvashem.org
Claimed
7 days ago
KuwaitGovernment & Defensemoi.gov.kw
Claimed
7 days ago
United Arab EmiratesTransportationdubaiairports.ae
Claimed
7 days ago
United Arab EmiratesGovernment & Defenseuaecustoms.ae
Claimed
7 days ago
Energy & Utilities
Claimed
7 days ago
Energy & Utilities
Claimed
7 days ago
OmanEnergy & Utilities
Claimed
7 days ago
United Arab EmiratesEnergy & Utilities
Claimed
7 days ago
Other
Claimed
7 days ago
IsraelTechnology
Claimed
11 months ago

Affected countries(7)

Countries where this group has been reported to target or leak victims.