MARNANBRIDGE
Named by GoogleSuspected state sponsor: Islamic Republic of IranMARNANBRIDGE is an online hacktivist persona operated by the Cotton Sandstorm cluster, used to publicly claim responsibility for cyberattacks and disseminate stolen data from Israeli and Western targets. The persona was active in hack-and-leak campaigns primarily in 2023 and 2024, following the pattern common to Iranian influence operations — combining real intrusions with amplified public claims to maximize psychological and reputational damage. MARNANBRIDGE activity has been attributed to the IRGC-linked Emennet Pasargad network through infrastructure and operational overlaps with the broader Cotton Sandstorm cluster.
Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.