VERY IMPORTANT

MERCURY, a nation-state actor linked to the Iranian government, attacked both on-premises and cloud environments. While the threat actors attempted to masquerade the activity as a standard ransomware campaign, the unrecoverable actions show destruction and disruption were the ultimate goals of the operation.