Actors Insights|Latest update04/07/2026

Aria Sepehr Ayandehsazan

Named by real nameSuspected state sponsor: Islamic Republic of Iran

Aria Sepehr Ayandehsazan (ASA) is an Iranian online persona and front identity linked to the Cotton Sandstorm cluster, used primarily for influence operations targeting Israeli and Western audiences. The persona has been associated with hack-and-leak campaigns, dissemination of stolen data, and the operation of fake news outlets designed to amplify Iranian state narratives. ASA operations accelerated significantly after October 2023, with the group claiming responsibility for data theft and publishing stolen content to maximize psychological impact. The underlying infrastructure and operational patterns connect ASA to the IRGC-linked Emennet Pasargad network.

This threat actor's name is changed to Emennet Pasargad
First Seen:Jun 2023
Last Seen:May 2026
Indexed Reports:2
Public IOCs:50
Cluster: Cotton SandstormMisp: Cotton Sandstorm
also known as:
Emennet Pasargad (real name)Holy SoulsMARNANBRIDGE (Google)NEPTUNIUM (Microsoft)Haywire Kitten (CrowdStrike)Cotton Sandstorm (Microsoft)Aria Sepehr Ayandehsazan (real name)

Targeted Regions

France
FR
France
France
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Israel
IL
Israel
Israel
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Sweden
SE
Sweden
Sweden
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
United States
US
United States
United States
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jun 2023 ~ Oct 2024
Aug 2023 ~ Nov 2024
Jan 2023Nov 2026

Targeted Sectors

High-TechInformation Technology

Recent Indexed Reports

  1. Public
    Fake Chrome Updates and Modular Malware: The WezRat Threat
  2. Public
    Emennet Pasargad Expands Tactics in Targeting Israel and Allied Nations

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.