Latest Iran news

Iranian hacking group targets Israel with wiper disguised as ransomware

An Iranian hacking group has been observed camouflaging destructive attacks against Israeli targets as ransomware attacks while maintaining access to victims' networks for months in what looks like an extensive espionage campaign.
- Sergiu Gatlan
- May 25, 2021
- 11:00 AM
- 0
Pro-Trump 'Enemies of the People' doxing site is still active

Enemies of the People, the website inciting violence against U.S. officials who refused to support the President's claims to voter fraud, is still active and continues to expose personal details from more individuals.
- Ionut Ilascu
- January 16, 2021
- 03:46 PM
- 4
FBI: Iran behind pro-Trump ‘enemies of the people’ doxing site

Iranian cyber actors are likely behind a campaign that encouraged deadly violence against U.S. state officials certifying the 2020 election results.
- Ionut Ilascu
- December 23, 2020
- 06:34 PM
- 10
Iranian nation-state hackers linked to Pay2Key ransomware

Iranian-backed hacking group Fox Kitten has been linked to the Pay2Key ransomware operation that has recently started targeting organizations from Israel and Brazil.
- Sergiu Gatlan
- December 17, 2020
- 12:01 PM
- 0
DarkSide ransomware's Iranian hosting raises U.S. sanction concerns

Ransomware negotiation firm Coveware has placed the DarkSide operation on an internal restricted list after the threat actors announced plans to host infrastructure in Iran.
- Lawrence Abrams
- November 15, 2020
- 10:01 AM
- 0
FBI: How Iranian hackers stole voter info from state election sites

DHS CISA and the FBI today shared more info on how an Iranian state-sponsored hacking group was able to harvest voter registration info from U.S. state websites, including election sites.
- Sergiu Gatlan
- October 30, 2020
- 06:44 PM
- 1
FBI shares technical details on Iran's fake Proud Boys emails

The Federal Bureau of Investigation (FBI) shared indicators of compromise (IOCs) associated with the Iranian state-sponsored threat group behind last week's Proud Boys voter intimidation emails that targeted Democratic voters.
- Sergiu Gatlan
- October 30, 2020
- 03:43 PM
- 0
Microsoft: Iranian attackers hacked security conference attendees

Microsoft disclosed today that Iranian state-sponsored hackers successfully hacked into the email accounts of multiple high-profile individuals and potential attendees at this year's Munich Security Conference and the Think 20 (T20) summit.
- Sergiu Gatlan
- October 28, 2020
- 12:34 PM
- 0
US govt: Iran behind fake Proud Boys voter intimidation emails

The US govt has stated that Iran is behind threatening emails sent to Democratic voters warning that they must vote for Trump or face consequences.
- Lawrence Abrams
- October 21, 2020
- 08:41 PM
- 1
Microsoft: Iranian hackers actively exploiting Windows Zerologon flaw

Microsoft today warned that the Iranian-backed MuddyWater cyber-espionage group was observed using ZeroLogon exploits in multiple attacks during the last two weeks.
- Sergiu Gatlan
- October 05, 2020
- 07:53 PM
- 0
Iranian hackers are selling access to corporate networks

An Iranian-backed hacker group has been observed while seeking to sell access to compromised corporate networks to other threat actors on underground forums and attempting to exploit F5 BIG-IP devices vulnerable to CVE-2020-5902 exploits.
- Sergiu Gatlan
- September 01, 2020
- 01:55 PM
- 0
Iranian hackers attack exposed RDP servers to deploy Dharma ransomware

Low-skilled hackers likely from Iran have joined the ransomware business targeting companies in Russia, India, China, and Japan. They are going after easy hits, using publicly available tools in their activity.
- Ionut Ilascu
- August 24, 2020
- 05:12 AM
- 1
FBI: Iranian hackers trying to exploit critical F5 BIG-IP flaw

The FBI warns of Iranian hackers actively attempting to exploit an unauthenticated remote code execution flaw affecting F5 Big-IP application delivery controller (ADC) devices used by Fortune 500 firms, government agencies, and banks.
- Sergiu Gatlan
- August 08, 2020
- 05:00 AM
- 0
US shares info on election interference tied to Russia, China, Iran

The Director of the U.S. National Counterintelligence and Security Center (NCSC) today shared information on ongoing election influence efforts linked to Russia, China, and Iran, before the 2020 U.S. elections.
- Sergiu Gatlan
- August 07, 2020
- 04:04 PM
- 3
FBI Releases Alert on Iranian Hackers' Defacement Techniques

The FBI Cyber Division issued a flash security alert earlier this month with additional indicators of compromise from recent defacement attacks operated by Iranian threat actors and info on attackers' TTPs to help administrators and users to protect their websites.
- Sergiu Gatlan
- January 27, 2020
- 06:35 PM
- 0
Microsoft Phishing Scam Exploits Iran Cyberattack Scare

An attacker is attempting to take advantage of the recent warnings about possible Iranian cyberattacks by using it as a theme for a phishing attack that tries to collect Microsoft login credentials.
- Lawrence Abrams
- January 07, 2020
- 12:50 PM
- 0
US Govt Says Iran's Cyberattacks Can Disrupt Critical Infrastructure

The U.S. Department of Homeland Security (DHS) warned in a terrorism threat alert issued through the National Terrorism Advisory System (NTAS) that potential cyberattacks carried out by Iranian-backed actors against the U.S. have the potential to disrupt critical infrastructure.
- Sergiu Gatlan
- January 06, 2020
- 11:34 AM
- 2
U.S. Government Issues Warning About Possible Iranian Cyberattacks

Christopher C. Krebs, Director of Cybersecurity and Infrastructure Security Agency issued a warning about a potential new wave of Iranian cyber-attacks targeting U.S. assets after Maj. Gen. Qassim Suleimani was killed by a U.S. airstrike at the Baghdad airport in Iraq.
- Sergiu Gatlan
- January 03, 2020
- 01:28 PM
- 0
New Iranian ZeroCleare Data Wiper Malware Used in Targeted Attacks

A new destructive data-wiping malware dubbed ZeroCleare has been spotted by IBM researchers during multiple targeted attacks against organizations from the energy and industrial sector in the Middle East.
- Sergiu Gatlan
- December 04, 2019
- 02:59 PM
- 0
Russian Hackers Use Iranian Threat Group's Tools, Servers as Cover

The Russian-backed Turla cyber-espionage group used stolen malware and hijacked infrastructure from the Iranian-sponsored OilRig to attack targets from dozens of countries according to a joint United Kingdom's National Cyber Security Centre (NCSC) and U.S. National Security Agency (NSA) advisory published today.
- Sergiu Gatlan
- October 21, 2019
- 03:29 PM
- 0