[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-usuG9B03_MYi7PMwQxV45ePUOqRQbuwrQpDBB1P85o":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":104},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"1a4dac16-f281-462f-b0d5-f23d544a7bc7","Cyber-Enabled Maritime Sanctions Evasion","cyber-enabled-maritime-sanctions-evasion-031fd9","Discover how Iranian and Russian shadow fleets use a vast network of fake maritime websites and fraudulent documents to evade international sanctions","Iranian and Russian shadow fleets are employing a network of over 36 inauthentic websites to evade international sanctions. These sites impersonate legitimate maritime organizations to generate fraudulent documents and certificates, complicating compliance and enforcement efforts. The activity is organized into three clusters, suggesting a service-provider model for reusable digital infrastructure.","Iranian and Russian shadow fleets use fake websites to evade sanctions.","https:\u002F\u002Fbit.ly\u002F4e4qKMf","https:\u002F\u002Fwww.recordedfuture.com\u002Fresearch\u002Fmedia_12cb79eec13b6af7520af3c1ae6768c0f4b25e945.gif?width=1200&#x26;format=pjpg&#x26;optimize=medium","2026-06-12T18:24:12+00:00","2026-06-12T19:00:14.901+00:00",7,[17,20,22],{"name":18,"type":19},"Iranian shadow fleet","threat_actor",{"name":21,"type":19},"Russian shadow fleet",{"name":23,"type":24},"Oceaniek Technologies","vendor","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":25,"icon":27,"name":28,"slug":29},null,"Nation-state","nation-state",[31,33,38],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[23],{"controls":46,"vendors":103},[47,74],{"slug":48,"name":49,"problem":50,"products":51},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":69,"product_name":70,"url":72,"description":73},"dnsfilter","DNSFilter","\u002Fvendor-logos\u002Fdnsfilter.png","https:\u002F\u002Fwww.dnsfilter.com\u002F","DNS filtering for offices and roaming devices.",{"slug":75,"name":76,"problem":77,"products":78},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":105,"title":106,"body":107,"framework_refs":108,"framework_notes":114},"maritime-shadow-fleet-uses-fake-websites-to-evade-sanctions","Maritime Shadow Fleet Uses Fake Websites to Evade Sanctions","Iranian and Russian actors created over 36 fraudulent websites impersonating legitimate maritime organizations to generate fake certificates and documents for sanctions evasion. This sophisticated operation demonstrates how threat actors exploit trusted third-party identities to circumvent regulatory controls and compliance systems. The service-provider model indicates this is not isolated activity but a scalable infrastructure that undermines international maritime security and trade integrity.",[109,110,111,112,113],"CIS Control 15","NIST SP 800-161","ISO 28000","GDPR Article 28","OFAC Compliance Guidelines",{}]