Cyber Isnaad Front
Cyber Isnaad Front is a newly emerged Iran-linked hacktivist threat actor active during the 2026 Iran-Israel-US conflict. The group was reported targeting Israeli critical infrastructure and telecommunications providers, and it published a hit list targeting individuals across multiple industries in Israel. Reporting cited the group as claiming breaches affecting telecom and fuel logistics infrastructure, including allegations that more than 160 data centers were compromised and that 5 TB of data was exfiltrated from a national fuel logistics provider. The available content places Cyber Isnaad Front among broader Iranian-aligned/pro-Iranian hacktivist activity that included DDoS attacks, website defacements, data theft, data wiping, and exploitation of exposed IoT devices, but the specific tactics and claims attributed to Cyber Isnaad Front in the provided material are limited to targeting critical infrastructure and telecom sectors and publishing targeting information on Israeli individuals. No additional aliases or sub-groups are identified in the provided content beyond the name Cyber Isnaad Front.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Telecommunication Services
- Energy
Where they target
Geographies tied to known operations.
- 🇮🇱 Israel
Where they're from
Attributed origin per open-source reporting.
- IR
Tradecraft
3 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
Recent activity
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Newly emerged Iran-linked threat actor that escalated activity during the conflict by publishing a hit list targeting individuals across multiple industries in Israel.
Emerging pro-Iranian group targeting Israeli critical infrastructure and telecom providers while using hit lists and pressure tactics against individuals across industries.
Allegedly IRGC-aligned leak actor sustaining publication of claimed telecom and fuel logistics breach material as an information operation.
Hacktivist group highlighted for threat claims against US/Israel/Gulf targets; falls within the broader low-to-medium sophistication surge described.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.