Iranian cyber threat actors are conducting targeted campaigns against U.S. financial institutions. These attacks leverage phishing, credential abuse, and persistence techniques to gain access and evade defenses. Once inside, adversaries exfiltrate sensitive data and enable ransomware activity, exposing critical gaps in enterprise security.