This news article is available in audio format, click play above to listen to the article.
The U.S. government has taken strong action against alleged cyber threats from Iran by announcing criminal charges and sanctions against four individuals and two companies. According to statements from the Treasury Department and the State Department, these measures were in response to a reported multi-year cyber campaign targeting numerous American companies and government entities.
The individuals and entities facing sanctions are accused of involvement in cyber activities on behalf of Iran's Islamic Revolutionary Guard Corps Cyber Electronic Command (IRGC-CEC). Among the targeted companies are Mehrsam Andisheh Saz Nik and Dadeh Afzar Arman, which are alleged to have employed the indicted individuals and acted as fronts for the IRGC cyber command.
According to Reuters, prosecutors in Manhattan have revealed that the corporate targets of the cyber campaign were primarily defense contractors with access to classified information. However, other entities, including a New York-based accounting firm and a hospitality company, were also among the targets.
Spear Phishing and Malware Attacks Deployed
The methods employed by the defendants allegedly included spear phishing and malware attacks. Spear phishing involves deceiving email recipients into clicking malicious links, while the defendants are also accused of impersonating women to gain the confidence of their targets.
In a statement, Under Secretary of the Treasury for Terrorism and Financial Intelligence, Brian E. Nelson, emphasized the severity of the cyber threats posed by Iranian actors. "Iranian malicious cyber actors continue to target U.S. companies and government entities in a coordinated, multi-pronged campaign intended to destabilize our critical infrastructure and cause harm to our citizens,” said Nelson. “The United States will continue to leverage our whole-of-government approach to expose and disrupt these networks’ operations.”
The U.S. Department of Justice, in conjunction with the Federal Bureau of Investigation, has unsealed an indictment against the four individuals for their alleged roles in the cyber activity targeting U.S. entities. This action underscores the U.S. government's commitment to disrupting malicious cyber networks and protecting national security interests.
While tensions between the United States and Iran have persisted on various fronts, including cybersecurity, this latest move signifies a proactive approach by U.S. authorities to counter cyber threats emanating from Iran.
