Latest Iran news

MuddyWater hacking group targets Turkey in new campaign

The Iranian-backed MuddyWater hacking group is conducting a new malicious campaign targeting private Turkish organizations and governmental institutions.
- Bill Toulas
- February 01, 2022
- 02:30 AM
- 0
US links MuddyWater hacking group to Iranian intelligence agency

US Cyber Command (USCYBERCOM) has officially linked the Iranian-backed MuddyWatter hacking group to Iran's Ministry of Intelligence and Security (MOIS).
- Sergiu Gatlan
- January 12, 2022
- 03:27 PM
- 0
State hackers use new PowerShell backdoor in Log4j attacks

Hackers believed to be part of the Iranian APT35 state-backed group (aka 'Charming Kitten' or 'Phosphorus') has been observed leveraging Log4Shell attacks to drop a new PowerShell backdoor.
- Bill Toulas
- January 11, 2022
- 06:17 PM
- 0
Log4j vulnerability now used by state-backed hackers, access brokers

As expected, nation-state hackers of all kinds have jumped at the opportunity to exploit the recently disclosed critical vulnerability (CVE-2021-44228) in the Log4j Java-based logging library.
- Ionut Ilascu
- December 15, 2021
- 11:09 AM
- 0
Telecom operators targeted in recent espionage hacking campaign

Researchers have spotted a new espionage campaign targeting telecommunication and IT service providers in the Middle East and Asia.
- Bill Toulas
- December 14, 2021
- 06:32 PM
- 0
Hackers exploit Microsoft MSHTML bug to steal Google, Instagram creds

A newly discovered Iranian threat actor is stealing Google and Instagram credentials belonging to Farsi-speaking targets worldwide using a new PowerShell-based stealer dubbed PowerShortShell by security researchers at SafeBreach Labs.
- Sergiu Gatlan
- November 24, 2021
- 01:42 PM
- 0
Hackers hit Iran's Mahan airline, claim confidential data theft

One of Iran's largest privately-owned airlines, Mahan Air, has announced a cybersecurity incident that has resulted in its website going offline and potentially data loss.
- Bill Toulas
- November 22, 2021
- 01:30 PM
- 0
Microsoft: Iranian state hackers increasingly target IT sector

Microsoft says Iranian-backed hacking groups have increasingly attempted to compromise IT services companies this year to steal credentials they could use to breach the systems of downstream clients.
- Sergiu Gatlan
- November 18, 2021
- 11:57 AM
- 0
US, UK warn of Iranian hackers exploiting Microsoft Exchange, Fortinet

US, UK, and Australian cybersecurity agencies warned today of ongoing exploitation of Microsoft Exchange ProxyShell and Fortinet vulnerabilities linked to an Iranian-backed hacking group.
- Sergiu Gatlan
- November 17, 2021
- 09:44 AM
- 0
Microsoft warns of the evolution of six Iranian hacking groups

The Microsoft Threat Intelligence Center (MSTIC) has presented an analysis of the evolution of several Iranian threat actors at the CyberWarCon 2021, and their findings show increasingly sophisticated attacks.
- Bill Toulas
- November 16, 2021
- 01:11 PM
- 0
FBI warns of Iranian hackers looking to buy US orgs’ stolen data

The Federal Bureau of Investigation (FBI) warned private industry partners of attempts by an Iranian threat actor to buy stolen information regarding US and worldwide organizations.
- Sergiu Gatlan
- November 10, 2021
- 04:30 PM
- 0
Iranian state hackers use upgraded malware in attacks on ISPs, telcos

The Iranian state-supported APT known as 'Lyceum' (Hexane, Spilrin) targeted ISPs and telecommunication service providers in the Middle East and Africa between July and October 2021.
- Bill Toulas
- November 09, 2021
- 12:33 PM
- 0
BlackShadow hackers breach Israeli hosting firm and extort customers

The BlackShadow hacking group attacked the Israeli hosting provider Cyberserve to steal client databases and disrupt the company's services.
- Bill Toulas
- November 01, 2021
- 10:37 AM
- 0
Iranian gas stations out of service after distribution network hacked

Gas stations from the National Iranian Oil Products Distribution Company (NIOPDC) have stopped working today due to what appears to be a cyberattack that affected the entire distribution network.
- Ionut Ilascu
- October 26, 2021
- 04:24 PM
- 0
Google sent 50,000 warnings of state-sponsored attacks in 2021

Google said today that it sent roughly 50,000 alerts of state-sponsored phishing or hacking attempts to customers during 2021, a considerable increase compared to the previous year.
- Sergiu Gatlan
- October 14, 2021
- 11:20 AM
- 2
Microsoft: Iran-linked hackers target US defense tech companies

Iran-linked threat actors are targeting the Office 365 tenants of US and Israeli defense technology companies in extensive password spraying attacks.
- Sergiu Gatlan
- October 11, 2021
- 11:52 AM
- 0
Hackers use stealthy ShellClient malware on aerospace, telco firms

Threat researchers investigating malware used to target companies in the aerospace and telecommunications sectors discovered a new threat actor that has been running cyber espionage campaigns since at least 2018.
- Ionut Ilascu
- October 06, 2021
- 03:42 PM
- 0
Govt hackers impersonate HR employees to hit Israeli targets

Hackers associated with the Iranian government have focused attack efforts on IT and communication companies in Israel, likely in an attempt to pivot to their real targets.
- Ionut Ilascu
- August 17, 2021
- 05:31 PM
- 0
Hackers behind Iranian wiper attacks linked to Syrian breaches

Destructive attacks that targeted Iran's transport ministry and national train system were coordinated by a threat actor dubbed Indra who previously deployed wiper malware on the networks of multiple Syrian organizations.
- Sergiu Gatlan
- August 16, 2021
- 09:06 AM
- 0
New destructive Meteor wiper malware used in Iranian railway attack

A new file wiping malware called Meteor was discovered used in the recent attacks against Iran's railway system.
- Lawrence Abrams
- July 29, 2021
- 12:46 PM
- 5