Iran hunts down double agents with fake recruiting sites, Mandiant reckons

August 30, 2024 at 12:31AM Iranian government-backed actors were reportedly using fake recruiting websites and social media accounts to target Farsi speakers suspected of collaborating with Iran’s enemies, including Israel. Google’s Mandiant team uncovered the operation, linking it to Iran’s regime and cyber unit APT42. The campaign’s purpose was to gather personal information and potentially … Read more

New Tickler malware used to backdoor US govt, defense orgs

August 29, 2024 at 11:49AM APT33, an Iranian hacking group, has deployed the Tickler malware to infiltrate the networks of government, defense, satellite, oil, and gas organizations in the US and the UAE. Based on the meeting notes, it is clear that the APT33 Iranian hacking group has utilized the new Tickler malware to infiltrate … Read more

US Sees Iranian Hackers Working Closely With Ransomware Groups

August 29, 2024 at 04:42AM Iranian state-sponsored hackers collaborate with ransomware groups to target US organizations since 2017. In a joint advisory, CISA, FBI, and DC3 state that the hackers assist the groups by providing network access for data encryption and extortion, receiving a ransom percentage. The hackers are associated with Pay2Key attacks, targeting Israel-based … Read more

Ukraine claims it hacked Russian Ministry of Defense servers

March 4, 2024 at 10:46AM The Ukrainian GUR claims to have breached the servers of the Russian Ministry of Defense, acquiring sensitive documents and identifying senior officials. The press release mentions specific data obtained, with four screenshots presented as evidence. The credibility of the screenshots is questioned by BleepingComputer, who is awaiting a response from … Read more