Cyber Av3ngers

Cyber Av3ngers, also known as Soldiers of Soloman, is a suspected Iranian Government Islamic Revolutionary Guard Corps (IRGC)-affiliated APT group. Active since at least 2020, the group has targeted critical infrastructure, including Unitronics Programmable Logic Controllers (PLCs) used in sectors such as water and wastewater, energy, and healthcare. In 2023, they conducted a global campaign that included defacing the user interface of affected devices.