Iran TerrorismCyber Security Firm Warns About Iran Hacking Threat

Cyber Security Firm Warns About Iran Hacking Threat


Iran Focus

London, 15 Dec – Two cyber security firms have warned the US against underestimate Iranian hackers in the wake of successful operations and advised that they need to be tracked more closely.

These hackers, who target enemies of  Iran and promote the Regime’s political agenda, have become more advanced in their attacks, which led advanced-threat protection firms FireEye and ClearSky to warn that the Regime is fast turning into a cyber crimes giant.


In November, Iranian agents attacked Microsoft Office software in order to target a Middle Eastern government according to FireEye. The suspects are an Iranian cyber-espionage threat group, known as APT34.

This group, more well known as OilRig, has a history of operations that align with Iran’s political agenda, which means that they are likely working under direction from the Regime, and conduct their attacks in a very different way.

Fred Plan, a senior analyst with FireEye, told eWEEK: “One thing that sets the Iranian cyber-espionage groups apart is they are not that reliant on technical solutions. They do not—like the Chinese and Russians—have a pile of zero days. They do a lot more basic social engineering.”

The problem is that the US is also dealing with cyber espionage from other states- like North Korea, China, and Russia- and don’t spend a lot of time on Iran’s operations. This needs to change.

Earlier this month, Israeli cyber-security consultancy ClearSky Cyber Security found that a lot of attacks against human-right activists and media organizations were conducted by Iranian hackers as well. Given the Regime’s relationship with journalists and human rights, it seems likely that they order this attack too.

Plan said: “In the case of Iran, it is [similar] to China and Russia—there is a spectrum of activity and many different actor groups. Some are very closely tied to what the government is doing, while others are nationalistic actors that get together and have a particular set of skills.”

Although Plan wants to be cautious about this, from what we know about the Regime it is unlikely anyone would target enemies of the Regime without being told to.

APT34 has targeted the financial, government, energy, chemical and telecommunications industries in the Middle East, using a spearphishing campaign and the MS Office vulnerability to install malware.

Given their speed at exploiting vulnerabilities, it is hard to believe that they aren’t being funded and instructed by the mullahs.

Latest news

Lies About an Industrial Boom in Iran

In a ridiculous manner, Iran’s Minister of Industry, Mines and Trade said that the country witnessed seven percent industrial...

Iran’s People Looted by the Government’s ETF Funds

The bright future envisioned in Iran for ETFs, or state-owned investment funds, was nothing more than a mirage like...

Iran’s Government Fears a ‘Second Field’

Social exclusion is the process in which individuals are blocked from the various rights, opportunities and resources that are...

Iran Expats Call for UN Investigation of 1988 Massacre

Iranian expatriates have written United Nations Secretary-General Antonio Guterres to once again urge the international organisation to investigate the...

Nearly 70m Iranians Can’t Afford Rice

Nearly 70 million people in Iran cannot afford rice following price increases, according to the secretary of the Rice...

The Confusing Clutter of the JCPOA and Iran’s Hasty Begging

For the Iranian government and its officials, the Vienna negotiations about a new Joint Comprehensive Plan of Action (JCPOA),...

Must read

Iran expands nuclear capacity underground: sources

Reuters: Iran has installed many more uranium enrichment machines...

Standard Chartered sued in U.S. over Iran ties to Lebanon bombing

Reuters: The estates of the victims of the 1983...

You might also likeRELATED
Recommended to you