Skip to content
Nation-state APTFinancialAdvanced sophistication · Small team

Malek Team

Malek Team is a nation-state APT group with a financial motive, tracked by Brandefense. It targets organisations in Israel. It uses 3 MITRE ATT&CK techniques.

Techniques
3
Exploited CVEs
No CVE data
First seen
Oct 8, 2023
Last seen
Dec 31, 2023
Record updated

Who They Target.

Countries · 1
Labelshack-and-leakinactiveiranian-linkedisrael-targetingstate-sponsored

About Malek Team.

Malek Team is an Iranian-linked threat actor that emerged in October 2023. The group operates as a cyber persona under Iran's Ministry of Intelligence and is formally linked to the BlackShadow campaign and the Agrius APT framework. Malek Team conducts hack-and-leak operations and influence operations primarily targeting Israeli entities. Notable attacks include Ono Academic College (October 2023) and Ziv Medical Center (December 2023). The Israel National Cyber Directorate (INCD), together with Shin Bet and the IDF, officially attributed this actor to the Iranian government. The group employs data theft and extortion tactics aimed at sowing chaos, weakening social cohesion, and eroding public trust in national institutions.

Last updated Jun 18, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.