Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Cyber-Enabled Maritime Sanctions Evasion

Recorded Future
Recorded Future
Published June 11, 2026Original Report

Excerpt

Executive Summary Iranian and Russian shadow fleet vessels, along with multiple sanctions evasion networks (SENs), are using online infrastructure likely designed to facilitate sanctions evasion. The infrastructure consists of inauthentic websites impersonating ship registries, national maritime administrations, seafarer training and certification organizations, protection and indemnity (P&I) clubs, and ship classification societies, effectively replicating key layers of…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREmarinegov.netCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Attack Flow6 steps · MITRE ATT&CK mapped

Resource DevelopmentTA0042T1587
1/6
Acquire Infrastructure
ActionCreate fake websites
Threat actors establish inauthentic websites impersonating legitimate maritime organizations to facilitate sanctions evasion.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainmarinegov.netHighScore 58/100First seen

IOC Relationship Graph

Building graph…