Memento Team

Memento Team is an Iranian-linked hacktivist group documented in 2021, known for deploying Python-based ransomware against organizations in Iran's regional adversary countries. The group targeted industrial and corporate organizations, encrypting files and demanding ransom payments. Researchers noted the malware lacked sophisticated capabilities compared to professional ransomware groups, suggesting Memento Team operated as a disruption-oriented persona rather than a financially motivated criminal actor. Activity was concentrated between May and November 2021, consistent with the short-lived persona pattern common across Iranian hacktivist operations.