Ransomware Intelligence

Ransomware needs a way in. Stolen credentials are the cheapest one.

Check Your Exposure

nasirsecurity Ransomware Group

Ransomware group profile

21Victims
LebanonSource country
38Impact score

Description

Nasir Security is a politically motivated cybercriminal group that emerged in late 2025, linked to Iran and operating under various aliases. Their operations focus on cyber warfare and propaganda, utilizing tactics such as data theft, supply chain attacks, and disinformation strategies rather than financial gain alone.

Key insights

  • Uses business email compromise and spear phishing to gain initial access.
  • Focuses on supply chain attacks to evade direct defenses of larger organizations.
  • Employs insecure cloud storage services for data exfiltration.
  • Engages in direct and double extortion, leveraging data leak sites.
  • Combines propaganda with cyber operations to exaggerate the scale of breaches.

Threat Level & Status Breakdown

For nasirsecurity · Based on incidents in selected period

1.8threat level
Aggressiveness4.3/ 10
Lethality0/ 10
Criticality1/ 10

Status Breakdown

Claimed100.0%21
First seenOct 2025
Last seenApr 2026
Avg ransom
Payment rate
Statusactive
Sophistication0
Last updatedSep 17, 2026

Recent activity

Monthly attack count for nasirsecurity in the selected period

21Total attacks
14peak in Mar
7avg / month
↑ 1 vs first month
OctMarApr0481216

Intelligence

IOCs, YARA/Sigma rules, and related families for nasirsecurity

  1. nasir.cc
View full IOC feed1 total

TTPs & Attack Vectors

Tools, initial access, and MITRE ATT&CK techniques for nasirsecurity

Other

T1486

T1486

T1490

T1490

T1021

T1021

T1562

T1562

T1078

T1078

T1547

T1547

T1059

T1059

T1566

T1566

T1530

T1530

T0819

T0819

T1656

T1656

Victims(17)

IsraelEducationyadvashem.org
Claimed
27 days ago
KuwaitGovernment & Defense
Claimed
6 months ago
KuwaitGovernment & Defensemoi.gov.kw
Claimed
27 days ago
United Arab EmiratesOther
Claimed
6 months ago
United Arab EmiratesTransportationdubaiairports.ae
Claimed
27 days ago
United Arab EmiratesGovernment & Defense
Claimed
6 months ago
United Arab EmiratesGovernment & Defenseuaecustoms.ae
Claimed
27 days ago
Saudi ArabiaEnergy & Utilities
Claimed
6 months ago
Energy & Utilities
Claimed
27 days ago
Energy & Utilities
Claimed
27 days ago
OmanEnergy & Utilities
Claimed
6 months ago
OmanEnergy & Utilities
Claimed
27 days ago
United Arab EmiratesEnergy & Utilities
Claimed
27 days ago
Other
Claimed
27 days ago
Lebanon
Claimed
11 months ago
IsraelGovernment & Defense
Claimed
11 months ago
IsraelTechnology
Claimed
11 months ago

Affected countries(7)

Countries where this group has been reported to target or leak victims.