Threat actorIranTracked since 2026-07

Keksec

Also known as:Iranian-hosted infrastructureAISURU ecosystem-linked

As of 2026-07-18, Keksec is a Iran-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Iranian-hosted infrastructure, AISURU ecosystem-linked.

Tracked threats: 11 high
First seen: 2026-072026-07-15
Last seen: 2026-072026-07-15
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 25Referenced by its activity
Attribution: IranNation or origin

Nation: Iran · 1 tracked threat(s) · Categories: MALWARE

Activity timeline

Keksec appears in 1 tracked threat between 2026-07-15 and 2026-07-15.

Tracked threats

TuxBot v3 Evolution: LLM-Assisted IoT Botnet Framework With a Broken Multi-CVE Exploit ChainHIGH2026-07-15