JMJacob on Intelligence

JacobMiller

TEHRANDUBAI

Threat researchertracking state-linked actors across Iran, the Middle East, and AI.

About

I'm a threat intelligence analyst who researches threat actors and the infrastructure they rely on, with a focus on Iran, the wider Middle East, and AI security. I turn fragmented technical and open-source data into clear, actionable intelligence.

Iran is where most of my attention goes. Its cyber operations don't stay online: as leaks from inside groups like Charming Kitten have shown, hacking and surveillance can feed directly into real-world targeting of people. I'm especially interested in that cyber-to-physical link, in how Iranian operators source infrastructure abroad, and in what Persian-language sources reveal that English-language reporting misses. I work in Persian-Farsi and Dari.

Beyond Iran, I look at the same problem more broadly: how digital exposure and network reconnaissance become real-world threats to people, facilities, and supply chains. On the side I built BoarNet, which tracks attackers by their tooling instead of their IP addresses.

This is where I publish what I find.

Research

Investigations, infrastructure write-ups, and analysis.

All research