Rana Intelligence Computing

Rana Intelligence Computing is an Iranian front company sanctioned by the US Treasury Department in September 2020 for its role as an operational cover for APT39 cyber espionage activity on behalf of Iran's Ministry of Intelligence and Security (MOIS). The US government's action formally linked the company's infrastructure and malware development to years of APT39 operations, including the use of backdoors such as SEAWEED, CACHEMONEY, and CHERRYBLOSSOMFLOWER against telecommunications, travel, and government targets. The designation provides the clearest public attribution connecting APT39's hacking activity to Iran's state intelligence apparatus.