Iran’s Ravin Academy, a training center for cyberattackers linked to the Iranian government, experienced a data breach exposing personal information of its associates and students. The attack was part of broader geopolitical tensions, with implications for Iran’s cyber operations and international sanctions. #YellowNix #MuddyWater
Keypoints
- The Ravin Academy was established in 2019 to train Iranian cyber operatives for intelligence projects.
- The breach exposed names, phone numbers, Telegram usernames, and in some cases, national IDs of participants and associates.
- Founders linked to the academy have alleged ties to MOIS and previous cyberattack groups like Yellow Nix and MuddyWater.
- Despite sanctions, groups like MuddyWater continue to conduct significant cyberattacks in the Middle East and North Africa.
- Iran remains an active participant in global cyber operations, targeting critical infrastructure and engaging in long-term strategic cyber conflicts.
Read More: https://www.theregister.com/2025/10/27/breach_iran_ravin_academy/