Iron Group is a cross-platform malware developer targeting thousands of victims on Windows, Linux, and Android.
Iron Group (Iron Cyber Group) is a threat actor developing cross-platform malware, including backdoors, crypto-miners, and ransomware. They target Windows, Linux, and Android platforms, having successfully infected at least a few thousand victims. Defenders should strengthen monitoring across the diverse attack surface (endpoint, server, mobile) and focus on unusual process behaviors and encryption-related activities.
Iron group has developed multiple types of malware (backdoors, crypto-miners, and ransomware) for Windows, Linux and Android platforms. They have used their malware to successfully infect, at least, a few thousand victims.
Iron Group develops cross-platform malware targeting Windows, Linux, and Android platforms.
Iron Group develops various types of malware, including backdoors, crypto-miners, and ransomware.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.