Shamoon Group
Aliases: Cutting Sword of Justice
- First seen
- 2012-08-15 00:00:00
- Origin
- IR
- Primary motivation
- sabotage
- Sophistication
- advanced
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 11:46:52
Targeted industries: energy-and-utilities
Targeted regions: country_code:sa country_code:ae
Context
Shamoon Group is an Iran-linked threat actor associated with destructive Shamoon wiper operations targeting organizations in the Middle East, especially in the energy sector.
Reports & references
- cfr.org — Shamoon (report)
- Kaspersky — 77232 (report)
- CISA — Aa22 055A (report)