Operation Epic Fury

Campaign
11 incidents First seen 2026-03-02 Last seen 2026-08-12
Overview

Operation Epic Fury appears in 5 incidents tracked by Vulpsec CTI; the most recent is: Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning. Targeted sectors: defense, government, telecommunications.

Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 170
Activity by month (incidents)
2026-032026-08
Sectors targeted
defense · 5government · 5aviation · 2telecommunications · 2energy · 1manufacturing · 1technology · 1
Countries targeted
IL · 10IR · 7AE · 6BH · 6KW · 6US · 6CA · 5GB · 4OM · 4SA · 4AT · 3BE · 3
Origin
IR · 9US · 6CA · 4QA · 4AE · 3BH · 3
Kinds of incident
DDoS & Disruption · 3State-Sponsored & Espionage · 3Industry & Policy · 2AI-Enabled Attack · 1Cyberattack (general) · 1Malware & Botnets · 1
Techniques seen in incidents
Phishing · 4Ddos · 3Ransomware · 3T1588.001 - Malware · 3Defacement · 2Espionage · 2Exfiltration · 2Reconnaissance · 2Wiper · 2Botnet · 1Lateral Movement · 1Privilege Escalation · 1Sabotage · 1Skimming · 1
Related malware
Avenger · 1Cobalt Strike · 1INC Ransomware · 1PlugX · 1
Related actors
MuddyWater · 2NoName057(16) · 1OilRig · 1
Incident timeline
2026-08-12
Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave
2026-06-09
Handala Claims Israeli Radar Hack, But Evidence Shows Phone Admin Panel
2026-03-03
Hacktivist campaigns increase as United States, Iran, and Israel conflict intensifies
2026-03-03
Pentagon ditches Anthropic AI over “security risk” and OpenAI takes over
2026-03-03
Amazon: Drone strikes damaged AWS data centers in Middle East
2026-03-03
Threat Brief: March 2026 Escalation of Cyber Risk Related to Iran
2026-03-02
Cyber Command disrupted Iranian comms, sensors, top general says