Actors Insights|Latest update24/07/2026

CyberAv3ngers

Named by self givenSuspected state sponsor: Islamic Republic of Iran

CyberAv3ngers is an IRGC-linked Iranian hacktivist group specializing in attacks against industrial control systems (ICS) and operational technology (OT), particularly internet-exposed programmable logic controllers (PLCs). The group gained international attention in late 2023 after compromising Unitronics PLCs at water and wastewater utilities across the United States following the Hamas-Israel conflict. US authorities — including CISA, FBI, EPA, and NSA — attributed these attacks to the IRGC, and the US Treasury sanctioned six IRGC Cyber Command officers linked to the group in February 2024.

First Seen:Oct 2023
Last Seen:Apr 2026
Indexed Reports:2
Public IOCs:10
also known as:
CyberAv3ngers (self given)Soldiers of SolomanG1027 (Mitre)

Targeted Regions

Israel
IL
Israel
Israel
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2023
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2023
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
United States
US
United States
United States
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2023
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2023
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Oct 2023 ~ Dec 2024
Jan 2023Nov 2026

Targeted Sectors

EnergyManufacturingOil and GasTransportation

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.