Unknown · assessed origin Iran
Shamoon Group
Cutting Sword of Justice
misp-galaxyrefreshed 2026-09-15
sigil
Analyst brief
Shamoon Group is an Iran-linked threat actor associated with destructive Shamoon wiper operations targeting organizations in the Middle East, especially in the energy sector.
Early access
Track Shamoon Group on the wire.
Early access opens the actor API and MCP server first — and an alert every time this adversary lands on the wire. One email when it's ready.
bot-protected