Electronic Operations Room of Islamic Resistance Axis is a pro-Iran, Iran-aligned hacktivist team observed operating in late February 2026. Multiple Iran-aligned personas were observed operating through this team. According to CTU reporting, Cyb3r Drag0nz claimed to have joined the Electronic Operations Room of Islamic Resistance Axis, and stated that the team aims to disrupt Israeli organizations and infrastructure. The available reporting places the group within a broader surge of pro-Iran hacktivist activity following the February 28, 2026 U.S. and Israeli strikes on Iran. That broader activity was characterized largely by low-sophistication operations and claims, including website defacements, DDoS attacks, doxxing, leaks, propaganda, misinformation, and unverified compromise claims against Israeli targets. No additional aliases, sub-groups, or independently verified operations were provided in the content.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Umbrella Iran-aligned team coordinating multiple personas involved in disruptive and influence-style cyber operations.
Named larger team or activity cluster focused on disrupting Israeli organizations and infrastructure.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.