The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and DC3 Forensics have jointly issued a cybersecurity advisory warning of Iran-based cyber actors targeting U.S. and foreign organizations. These hackers are reportedly collaborating with ransomware affiliates, providing access to victim networks in exchange for a share of ransom payments. The advisory highlights the increasing use of AI by cybercriminals to facilitate ransomware attacks. U.S. intelligence agencies have identified Iranian-sponsored hackers acting as access brokers for ransomware groups such as ALPHV.