Cyberno, officially known as Donyaye Fanavari Amn Vira, operates at the intersection of artificial intelligence and Iran’s growing cyber warfare apparatus. Intelligence assessments suggest that Cyberno plays a role in advancing AI-enhanced cyber operations for Iranian state-sponsored hacking groups. Cyberno’s rapid integration of machine learning into reconnaissance, network exploitation, and disinformation campaigns has elevated Iran’s offensive cyber capabilities, making its operations more adaptive, scalable, and resilient to countermeasures.
Cyberno’s documented affiliations with Iran’s Ministry of Intelligence and Security (MOIS) and the Islamic Revolutionary Guard Corps (IRGC) place it within Tehran’s broader cyber strategy. Analysis of its activities indicates direct support for Advanced Persistent Threat (APT) groups, including APT34 (OilRig), APT35 (Charming Kitten), and APT42 (Phosphorus). The groups are responsible for high-profile cyber intrusions targeting governments, financial institutions, and defense sectors worldwide. Cyberno’s AI-driven automation enhances their ability to conduct prolonged intrusions while evading detection.
At the core of Cyberno’s advancements is its ability to weaponize AI for cyber offense. Unlike traditional cyber operations, which rely on manual reconnaissance and brute-force penetration attempts, Cyberno’s machine-learning algorithms analyze network vulnerabilities in real-time, generating adaptive attack vectors that bypass conventional security barriers. The level of automation allows for a shift from reactive hacking methodologies to proactive, anticipatory cyber operations—where Iranian cyber units predict and neutralize defensive measures before they are even deployed.
Cyberno’s AI-powered phishing engines refine social engineering tactics, enabling state-backed hackers to craft hyper-personalized phishing campaigns at scale. Their campaigns manipulate human trust, breaching high-value targets with surgical precision by using behavioral analytics and deepfake technology.
Read the report