Latest Iran news

Iranian Hackers Create Credible Phishing to Steal Library Access

The Silent Librarian threat group is constantly updating its tactics and techniques, to the point of using on its login phishing pages info and alerts that is accurate and relevant to potential victims.
- Ionut Ilascu
- October 14, 2019
- 09:19 AM
- 0
Microsoft Discovers Iranian Hacking Campaign Targeting U.S. Politics

Microsoft says that a state-sponsored Iranian cyber-espionage group tracked as Phosphorus by the Microsoft Threat Intelligence Center (MSTIC) attempted to get account info on over 2,700 of its customers, attack 241 of them, and compromised four accounts between August and September.
- Sergiu Gatlan
- October 04, 2019
- 02:53 PM
- 0
Iranian Hackers Hit Over 60 Universities to Get Library Access

Cobalt Dickens, a threat actor associated with the Iranian government, ran a phishing operation in July and August that targeted more than 60 universities in countries on four continents.
- Ionut Ilascu
- September 12, 2019
- 03:33 AM
- 1
U.S. Government Warns of Data Wipers Used in Iranian Cyberattacks

According to a statement by the U.S. Cybersecurity and Infrastructure Security Agency, an increase in cyberattacks utilizing destructive wiper tools has been detected targeting U.S. industries and government agencies by Iranian actors or proxies.
- Lawrence Abrams
- June 22, 2019
- 08:14 PM
- 0
MuddyWater Updates POWERSTATS Backdoor For Multi-Stage Attacks

The Iranian-backed MuddyWater cyber-espionage group is continuously upgrading and improving its tools lately, with the group's POWERSTATS backdoor being the last to receive an update.
- Sergiu Gatlan
- June 10, 2019
- 10:35 AM
- 0
The MuddyWater APT Group Adds New Tools to Their Arsenal

The Iranian MuddyWater cyber-espionage group added new attack vectors to use as part of hacking campaigns targeting telecommunication and governmental organizations according to an analysis from the Clearsky Security threat intelligence outfit.
- Sergiu Gatlan
- June 06, 2019
- 07:00 AM
- 0
MuddyWater Hacking Group Upgrades Arsenal to Avoid Detection

The MuddyWater threat group has been updating its tactics, techniques, and procedures (TTPs) to include a number of new anti-detection techniques designed to provide remote access to compromised systems while evading detection as part of a new campaign dubbed BlackWater.
- Sergiu Gatlan
- May 20, 2019
- 01:40 PM
- 0
Hacker Group Exposes Iranian APT Operations and Members

Hackers have revealed details about the inner workings of a cyber-espionage group mostly known in the security community as OilRig, APT34, and HelixKitten, linked to the Iranian government.
- Ionut Ilascu
- April 18, 2019
- 10:10 AM
- 0
BlackRouter Ransomware Promoted as a RaaS by Iranian Developer

A ransomware called BlackRouter has been discovered being promoted as a Ransomware-as-a-Service on Telegram by an Iranian developer. This same actor previousl distributed another ransomware called Blackheart and promotes other infections such as a RAT.
- Lawrence Abrams
- January 17, 2019
- 05:48 PM
- 2
Making a Ransomware Payment? It May Now Violate U.S. Sanctions

Thinking about making a ransomware payment? If so, you may want to think twice before doing so as it could land you in trouble for violating U.S. government sanctions.
- Lawrence Abrams
- November 30, 2018
- 12:02 PM
- 1
Iranian Hackers Charged in March Are Still Actively Phishing Universities

An Iranian hacking group has continued its phishing operations undeterred by indictments from the US Department of Justice.
- Catalin Cimpanu
- August 24, 2018
- 09:00 AM
- 1
Symantec Discovers New and Inexperienced Iranian APT

US cyber-security firm Symantec published a report this week detailing the attacks of a newly discovered cyber-espionage group that it internally refers to as Leafminer.
- Catalin Cimpanu
- July 27, 2018
- 12:35 AM
- 0
Iranian APT Poses As Israeli Cyber-Security Firm That Exposed Its Operations

An Iranian cyber-espionage group attempted to pose as one of the cyber-security firms that exposed its previous hacking campaigns in an effort to spear-phish people interested in reading reports about it.
- Catalin Cimpanu
- July 03, 2018
- 12:35 AM
- 0
Iranian & Russian Networks Attacked Using Cisco's CVE-2018-0171 Vulnerability

Last night, a hacker group going under the name "JHT" attacked foreign network infrastructure, including Russian and Iranian networks, using the Cisco CVE-2018-0171 Smart Install vulnerability. Using this vulnerability the hackers were able to reset the routers back to their default configuration and display a message to the victims.
- Lawrence Abrams
- April 07, 2018
- 04:12 PM
- 1
Iranian Hackers Charged Last Week Were Actually Pretty Damn Good Phishers

The group of Iranian hackers the US charged last week with hacking over 300 universities across the globe were actually master phishers astute at their craft, so much so that they used the same phishing lure for years without needing to change it.
- Catalin Cimpanu
- March 27, 2018
- 01:00 AM
- 0
US Charges Nine Iranians With Hacking Over 300 Universities

US authorities have charged nine Iranian hackers with cyber-attacks against 144 US universities, 176 universities in 21 foreign countries, and 47 US and foreign companies active in various private sectors.
- Catalin Cimpanu
- March 23, 2018
- 11:20 AM
- 0
Apple Bans Iran from the App Store

Iranian users have not been able to access Apple's App Store all day today, in what appears to be a ban put in place by the US company.
- Catalin Cimpanu
- March 15, 2018
- 02:35 PM
- 0
Black Ruby Ransomware Skips Victims in Iran and Adds a Miner for Good Measure

A new ransomware was discovered this week by MalwareHunterTeam called Black Ruby. This ransomware will encrypt the files on a computer, scramble the file name, and then append the BlackRuby extension. To make matters worse, Black Ruby will also install a Monero miner on the computer that utilizes as much of the CPU as it scan.
- Lawrence Abrams
- February 09, 2018
- 06:10 PM
- 2
HBO Hacker Was Part of Iran's "Charming Kitten" Elite Cyber-Espionage Unit

Behzad Mesri, the Iranian national the US has accused of hacking HBO this year, is part of an elite Iranian cyber-espionage unit known in infosec circles as Charming Kitten, according to a report released yesterday by Israeli firm ClearSky Cybersecurity.
- Catalin Cimpanu
- December 06, 2017
- 04:45 AM
- 1
Tyrant Ransomware Spreads in Iran Disguised as Popular VPN App

The Iran Computer Emergency Response Team Coordination Center (Iran CERTCC) has issued a security alert about a ransomware distribution campaign currently active in the country.
- Catalin Cimpanu
- October 25, 2017
- 03:41 AM
- 1