Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack

September 12, 2024 at 07:18AM Iranian state-sponsored threat actor OilRig targeted Iraqi government networks in a sophisticated cyber attack. The group, also known as APT34, employed a range of custom backdoors and a new set of malware families in the campaign. The attacks involved unique command-and-control mechanisms and aimed to execute PowerShell commands and harvest … Read more

Iranian hackers work with ransomware gangs to extort breached orgs

August 28, 2024 at 01:28PM Iranian hacking group Pioneer Kitten has been targeting defense, education, finance, and healthcare organizations in the US. They are collaborating with ransomware affiliates to extort victims. Based on the meeting notes, it appears that an Iran-based hacking group called Pioneer Kitten is actively breaching defense, education, finance, and healthcare organizations … Read more

Iran-Israel Cyber War Goes Global

February 8, 2024 at 12:10PM Iran’s global cyber conflict with Israel has escalated, with cyberattacks targeting businesses and government agencies worldwide. Iran’s cyber threat extends to the US and Europe, as it aims to pressure governments and influence business communities. The cyber offensive has impacted Albania and the US, prompting sanctions and posing potential risks … Read more

Pro-Iran Attackers Access Multiple Water Facility Controllers

December 8, 2023 at 04:49AM US infrastructure may be compromised by Iran-linked attackers targeting PLCs, warns a coalition of US and Israeli agencies. The CyberAv3ngers group, believed to be connected to Iran’s IRGC, attacked a Pennsylvania water authority and may have accessed multiple facilities since November 22, exploiting poorly secured internet-connected devices. Meeting Takeaways: 1. … Read more

Pro-Iran Attackers Access Multiple Water Facility Controllers

December 4, 2023 at 01:05PM Iran-linked CyberAv3ngers hacked US infrastructure, compromising logic controllers in multiple states. The FBI-led interagency alert followed a Pennsylvania water authority breach, indicating potential control disruptions in critical utilities. The attackers exploited weak security, with a 10-day undetected access, prompting urgent system evaluations. Meeting Takeaways: 1. **Attack on U.S. Infrastructure by … Read more