Loose hacktivist collective targeting government and infrastructure with defacements and DDoS.
IRGC-aligned cluster opportunistically deploying ransomware.