Cyber Threat Actor: Homeland Cheetahs

The threat actorknown as the Homeland Cheetahs operates under that alias and is associated with Israel according to the provided context. The group publicly identifies itself as composed of dissidents within Iran's military and security forces. It claims responsibility for attacks on strategic sites inside Iran, specifically naming the Natanz nuclear facility. Targeted sectors include nuclear installations, oil refineries, power plants, major factories, businesses, and economic infrastructure such as ports. The geographic focus of its claimed actions is Iran. According to an analyst quoted in the source, the strategic objective of targeting these sites is to weaken Iran's economy and compel the regime to cease financing militia groups. This objective is framed as a form of economic and political disruption rather than financial gain.

The group's known tactics involve sending email statements that include propaganda videos describing alleged attacks on Iranian sites. Preparation of such messages and videos is described as requiring hours or days of planning, indicating a deliberate communication effort. No specific malware families, exploit tools, or initial access vectors are mentioned in the source material regarding the Homeland Cheetahs. Attribution to any state sponsor or criminal consortium remains unconfirmed in public reporting, although speculation about Israeli involvement appears in the article without definitive evidence. A representative operation cited is the claimed responsibility for the explosion at the Natanz nuclear plant on June 30, 2020, which coincided with satellite‑observed fire damage. Another cited action is the alleged cyber attack on the Shahid Rajaae port in southern Iran, described as disrupting water traffic and flooding roads near the terminal. The source also notes a broader pattern of unexplained fires and explosions at various Iranian strategic sites in the surrounding weeks, which the group says it has conducted. These facts constitute the publicly available information about the Homeland Cheetahs' activities, capabilities, and claimed objectives.