APT42, a threat actor associated with Iran's Islamic Revolutionary Guard Corps Intelligence Organisation (IRGC-IO), was identified as carrying out social engineering attacks, including posing as journalists, to breach corporate networks and cloud environments of targets primarily in Western and Middle Eastern regions. This group, documented by Mandiant since 2022, has conducted over 30 operations across 14 countries, targeting a diverse array of entities such as media outlets, educational institutions, NGOs, and legal services.