Hackers linked to Iran may target U.S. companies and critical infrastructure, especially defense organizations that have connections with Israeli research and defense firms, according to an advisory released Monday by U.S. government agencies.
The advisory was issued by the FBI, the National Security Agency, the Department of Defense Cyber Crime Center (DC3), and the cybersecurity division of the Department of Homeland Security. Although there is currently no evidence of a coordinated cyber campaign linked to Iran, the agencies urged organizations to strengthen their cybersecurity measures.
"Even with a declared ceasefire and ongoing talks aimed at a permanent resolution, Iranian-linked cyber actors and hacktivist groups may still engage in malicious cyber operations," the agencies stated.
So far, cybersecurity experts in Israel and the United States have observed minimal Iranian cyber activity following the war that began on June 13 and the U.S. strikes on Iranian nuclear sites on June 22.
U.S. authorities warned that Iranian state-backed hackers are known to exploit unpatched software vulnerabilities and compromise internet-connected devices that rely on default or weak passwords. These hackers have also worked with ransomware operators to encrypt, steal, and leak sensitive data.
In a notable incident from November 2023, attackers believed to be tied to Iran’s Revolutionary Guards breached water and wastewater treatment systems in several U.S. states. The hackers targeted a device manufactured in Israel shortly after the October 2023 Hamas attacks on Israeli territory.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
