Iran-nexus threat groups are using generative AI for malware development, industrial control system mapping, and multilingual phishing campaigns.