Iran Nuclear NewsAnother cyber espionage campaign found targeting Iran

Another cyber espionage campaign found targeting Iran

-

Reuters: Security experts have uncovered an ongoing cyber espionage campaign targeting Iran and other Middle Eastern countries that they say stands out because it is the first such operation using communications tools written in Persian.
BOSTON (Reuters) – Security experts have uncovered an ongoing cyber espionage campaign targeting Iran and other Middle Eastern countries that they say stands out because it is the first such operation using communications tools written in Persian.

Israeli security company Seculert and Russia’s Kaspersky Lab, said on Tuesday that they identified more than 800 victims of the operation. The targets include critical infrastructure companies, engineering students, financial services firms and government embassies located in five Middle Eastern countries, with the majority of the infections in Iran.

Seculert and Kaspersky declined to identify specific targets of the campaign, which they believe began at least eight months ago. They said they did not know who was behind the attacks or if was a nation state.

“It’s for sure somebody who is fluent in Persian, but we don’t know the origin of those guys,” said Seculert Chief Technology Officer Aviv Raff.

The Mahdi Trojan lets remote attackers steal files from infected PCs and monitor emails and instant messages, Seculert and Kaspersky said. It can also record audio, log keystrokes and take screen shots of activity on those computers.

The firms said they believed multiple gigabytes of data have been uploaded from targeted machines.

“Somebody is trying to build a dossier of a larger scale on something,” Raff said. “We don’t know what they are going to do at the end.”

Researchers have previously said that nation states were almost certainly behind the Flame virus, which was discovered earlier this year, and Duqu, which was uncovered in 2011.

Seculert and Kaspersky dubbed the campaign Mahdi, a term referring to the prophesied redeemer of Islam, because evidence suggests the attackers used a folder with that name as they developed the software to run the project.

They also included a text file named mahdi.txt in the malicious software that infected target computers.

(Reporting by Jim Finkle; Editing by Lisa Von Ahn)

Latest news

Iran’s Youths Broke the Spell of Fear

One of the main characteristics of the recent protests in Iran is the courage and fearlessness of the people,...

Iran Is on the Brink of a Revolution

The wall of fear has been broken. In many cities across Iran, women are taking to the streets, leading...

Iran’s Regime Claims To Fill Global Energy Gap Despite Crippled Petroleum Sector

In recent weeks, the Iranian regime’s officials have been constantly exaggerating their huge capacity in oil and gas reserves...

What Is Happening in Iran?

Following the brutal killing of Masha Amini, the Iranian people have once again united to fight and defeat the...

Iran Regime’s Ministry of Culture’s Decision To Eliminate Children’s Intellectual Centers

With the so-called ‘Cultural Revolution’ which took place between 1980 and 1983, the Iranian regime tried to purge the...

Water Shortage Crisis and the Destruction of Iran’s Water Resources

Iran is currently suffering from a number of dangerous natural disasters. One of the most worrying is the drying...

Must read

New charges filed against Irish firm on Iran exports

AFP: New charges were filed Wednesday against Irish-based Mac...

Iran not keeping its word on stabilizing Iraq: US

AFP: The United States asked Iran to live up...

You might also likeRELATED
Recommended to you