Actors Insights|Latest update04/07/2026

Emennet Pasargad

Named by real nameSuspected state sponsor: Islamic Republic of Iran

Emennet Pasargad is an Iranian company sanctioned by the US Treasury Department for conducting state-directed cyberattacks and influence operations on behalf of the IRGC. The company has been linked to hack-and-leak campaigns, website defacements, and online influence operations targeting the United States, Israel, and other Western countries. The US government formally attributed several high-profile operations to Emennet Pasargad, including attempts to interfere in the 2020 US presidential election by sending intimidating emails to voters. The company is the primary operational entity behind the Cotton Sandstorm cluster and its associated personas.

This threat actor previously was known as Aria Sepehr Ayandehsazan
First Seen:Jun 2023
Last Seen:May 2026
Indexed Reports:2
Public IOCs:50
Cluster: Cotton SandstormMisp: Cotton Sandstorm
also known as:
Emennet Pasargad (real name)Holy SoulsMARNANBRIDGE (Google)NEPTUNIUM (Microsoft)Haywire Kitten (CrowdStrike)Cotton Sandstorm (Microsoft)Aria Sepehr Ayandehsazan (real name)

Targeted Regions

France
FR
France
France
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Israel
IL
Israel
Israel
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Sweden
SE
Sweden
Sweden
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
United States
US
United States
United States
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jan 2023Nov 2026

Targeted Sectors

High-TechInformation Technology

Recent Indexed Reports

  1. Public
    Fake Chrome Updates and Modular Malware: The WezRat Threat
  2. Public
    Emennet Pasargad Expands Tactics in Targeting Israel and Allied Nations

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.