Predatory Sparrow is a hacktivist group known for disruptive cyber-physical attacks targeting Iran's industrial control systems.
Predatory Sparrow (also tracked as Indra or Gonjeshke Darande) is a self-proclaimed hacktivist group. It specifically targets Iran's critical manufacturing and transportation sectors, including steel plants and railway systems. Its primary TTPs involve disruptive cyber-physical attacks against industrial control systems (ICS) and data exfiltration operations. Defenders should focus on anomaly detection, particularly within ICS environments, and ensure strong authentication measures on accessible systems.
A self-proclaimed hacktivist group that carried out attacks against Iranian railway systems and against Iranian steel plants.
Predatory Sparrow specifically targets Iran's critical manufacturing and transportation sectors, including steel plants and railway systems.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.