An iran-linked advanced persistent threat (apt) is reported to have posed as a member of the chaos ransomware group in an espionage campaign. The apt allegedly used this disguise to carry out cyber espionage. The nature and scope of the campaign are not entirely clear, with some reports focusing on the apt's tactics while others appear to reference unrelated cyber threats.