State agencyConfirmed
Islamic Revolutionary Guard Corps
IRGC
An Iranian state organisation. Google associates the threat actor it tracks as APT42 with the IRGC and documented its 2024 campaign-related phishing; the U.S. Justice Department separately charged three alleged IRGC employees over the campaign hack-and-leak activity. The charges remain allegations unless proved in court.
Operations
Elections
Evidence Library
IndictmentU.S. Department of JusticeSeptember 27, 2024
Three IRGC cyber actors indicted for alleged 2024 U.S. election hack-and-leak operationOriginalArchive pending
Platform reportGoogle Threat Analysis GroupAugust 14, 2024
Iranian-backed group steps up phishing campaigns against Israel and the U.S.OriginalArchive pending
IndictmentU.S. Department of JusticeSeptember 27, 2024
Three IRGC cyber actors indicted for alleged 2024 U.S. election hack-and-leak operationOriginalArchive pending
Platform reportGoogle Threat Analysis GroupAugust 14, 2024
Iranian-backed group steps up phishing campaigns against Israel and the U.S.OriginalArchive pending