Iran's IRGC- and MOIS-aligned APTs, including APT34 (OilRig) and MuddyWater, run synchronized espionage, DDoS, and ICS/OT intrusions alongside hacktivist proxies during the Israel-Iran conflict, with confirmed access claims against Gulf energy and water utilities.