CyberAv3ngers

ACTIVE CAMPAIGN TRACKED ▲ High Threat Iran

Primary Aliases: Hydro Kitten Bauxite G1027 Shahid Kaveh Group

Sponsor / State Affiliation Iran (suspected IRGC-linked)

Primary Motivation Political sabotage and retaliation against Western and Israeli interests

Confidence Rating 85% (Grounded)

US Water Infrastructure Exploitation, Critical Infrastructure Probing

🎯 Target Sectors & Focus

Water and Wastewater Systems Industrial Control Systems (ICS/SCADA) Critical Infrastructure IoT/IIoT Devices Energy Sector

🛡️ MITRE ATT&CK® Attack Lifecycle (5 TTPs)

📥 Download Navigator JSON

Credential Access & Discovery 1

T1003 Exploitation of default credentials

Command & Control 1

T1071 Operational technology (OT) disruption

Operational Techniques 3

T1000 Targeting of Unitronics Programmable Logic Controllers (PLCs)

T1000 Website defacement

T1000 Denial of Service (DoS)

📰 Verified Campaigns & Intelligence Archive

🔔 Subscribe to Alerts

[DEEP DIVE] CyberAv3ngers Target Unitronics, Federal Signal, and Genmark Siren Controllers in Psychological Warfare Campaign

Attacks and Vulnerabilities 2026-06-27

[DEEP DIVE] Iranian-Linked Cyber Av3ngers Campaign Targeting Unitronics PLCs

Attacks and Vulnerabilities 2026-08-16

[DEEP DIVE] Coordinated Attack on Minnesota Water Infrastructure Targeting Rockwell Automation and Schneider Electric PLCs

Attacks and Vulnerabilities 2026-07-29

Copied to clipboard

LINK COPIED TO CLIPBOARD