Iranian Avenger — Hacktivist Profile

Iranian Avenger is a newly emerged Iranian-aligned hacktivist persona that became active following escalations in early 2025, conducting DDoS attacks and website defacements against Israeli, US, and European targets. The group uses Telegram as its primary operational and propaganda channel, publishing attack claims and evidence of successful intrusions. Iranian Avenger is assessed to be a fresh persona potentially fronting for existing IRGC-linked infrastructure, given the rapid operational maturity observed shortly after emergence. Their targeting priorities align with broader Iranian strategic objectives in the cyber domain.

Vendor research

Hacktivist campaigns increase as United States, Iran, and Israel conflict intensifies Sophos
Cyber Advisory: Increased Cyber Risk Amid U.S.–Israel–Iran Escalation Sophos

Read the full analysis on IntelFusions