iran news
7 stories
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has reportedly imposed sanctions on approximately 60 Iran-linked entities and individuals. Among those sanctioned is a cyber group that is reportedly affiliated with Iran's Ministry of Intelligence and Security (MOIS). This group is accused of conducting widespread breaches targeting U.S. critical infrastructure, alongside engaging in financially motivated…
Iran-linked cyberattack shut down a UK power plant
A small-scale power plant in the United Kingdom was shut down for four days due to a suspected cyberattack, which government officials confirmed on Monday. While the UK government has not formally attributed the incident, it is believed to be linked to Iran. Authorities emphasized that the wider energy system was never at risk, describing it as "highly resilient."
UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks
A power plant in the United Kingdom was reportedly shut down for four days by Iran-linked hackers, an incident described as the most successful cyberattack of its kind against UK energy infrastructure. The outage, which occurred concurrently with attacks on water infrastructure across 12 U.S. states, did not impact the UK's wider power supply due to the plant's small size.
Ex-NSA Chief Urges Disconnecting Water Controllers from Internet
Retired General Paul Nakasone, former director of the National Security Agency, has advocated for disconnecting water system controllers from the internet, citing recent suspected Iranian cyberattacks on US water facilities. Speaking at the DEF CON conference, Nakasone emphasized the need for higher cybersecurity standards, stating that programmable logic controllers (PLCs) used in water…
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
A cyberespionage group with suspected ties to Iran has been observed employing a flexible, modular command-and-control (C2) framework to conduct attacks. The group has focused its efforts on compromising information technology service providers as a means to gain access to more valuable targets, particularly those located in Israel.
Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
Check Point Research (CPR) has identified a sophisticated modular command-and-control (C2) framework named 'Cavern Manticore,' linked to an Iran-nexus threat actor. This group primarily targets Israeli organizations, with a particular focus on government entities and the IT sector. Cavern Manticore exhibits technical similarities to other Iran-linked groups, including MuddyWater and Lyceum,…
Iran-Nexus TAG-182 Disseminates MarkiRAT Surveillance Tool
A cyber-espionage group identified as TAG-182, believed to be operating on behalf of the Iranian government, is actively distributing a surveillance tool known as MarkiRAT. This malware is being disseminated through fake applications designed to mimic legitimate services like VPNs and media players, with the apparent aim of collecting intelligence on Iranian targets both within and outside the…