APT / THREAT GROUP
Sands Casino
🇮🇷Iran-attributed
1
campaigns
1
aliases
Last seen:Mar 17, 2026
Intelligence Profile
Threat actor tracked by Malpedia.
Intelligence Assessment
Sands Casino is a threat group originating from Iran. This actor is tracked by Malpedia.
Outlook
Sands Casino was last active on 2026-03-18 and appears to be currently active. Their operations include campaigns such as "Sands Casino — Active Operations March 2026".
Generated by the CTIWATCH analysis pipeline from this actor's tracked data (victims, campaigns, TTPs, activity). Attribution and assessments may be incomplete — verify against primary reporting before acting.
Threat Analysis
Sands Casino is a known-sophistication threat actor attributed to Iran, engaged in cyber operations with a primary motivation of unknown activity patterns.
Known Campaigns
Sands Casino — Active Operations March 2026
Sands Casino is a unknown-motivation threat actor attributed to Iran. Threat actor tracked by Malpedia....
MEDIUM2026
Quick Facts
TypeAPT / Threat Group
Origin🇮🇷 Iran
Aliases1
SourceMalpedia
Also Known As
Sands Casino
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.