Iran blurs the line between state espionage and cybercrime

MOIS-linked cyber units now use commercial malware and ransomware alongside custom espionage tools, creating attribution confusion and complicating accountability.