Iran TerrorismYet Another Iran Regime Hacking Group Discovered

Yet Another Iran Regime Hacking Group Discovered


Iran Focus

London, 8 Dec – The Iranian Regime’s ever-growing network of hackers- and their various hacks- show no sign of slowing down, according to new research by the security firm FireEye.

The report, published on Thursday, showed that a new Iranian regime network reconnaissance group called Advanced Persistent Threat 34 has spent years infiltrating critical infrastructure companies.

This report, which contains research collected by a team of 34 researchers between 2015 and 2017, is a warning about the danger that the international community could face if Iran isn’t stopped, especially considering their previous aggressive hacks on the financial sector and a New York dam.

APT 34 has been in operation since at least 2014, according to FireEye, and have targeted financial, energy, telecommunications, and chemical companies.

They are using malicious email attachments- like Excel documents- to trick targets into downloading a virus or creating fake social media profiles to lure employees in and trick them into downloading a virus hidden inside an image file.

Jeff Bardin, the chief intelligence officer of the threat-tracking firm Treadstone 71, which monitors Iranian regime’s hacking activity said: “They get in and make a lot of modifications, download new malware, manipulate the memory, so it’s definitely pretty sophisticated. And the Powershell activity has been largely a hallmark of Iranian activity lately. They change their tactics constantly. The more we divulge things we know about them, the more they’ll shift and change.”

Evidence of Iranian regime Involvement

The evidence that APT 34 is Iranian comes from their Iranian IP addresses, the fact that hacks occur during normal Iranian business hours, and that their efforts align with Iranian interests by targeting Iran’s enemies (like political dissidents).

John Hultquist, director of intelligence analysis at FireEye, said: “We have seen, and this is with a lot of the Iranian actors, a very disconcerting or aggressive posture towards critical infrastructure organizations. APT 33 has targeted a lot of organizations in critical infrastructure in the Middle East and so has APT 34. They obviously represent opportunities for intelligence collection. But we always have to think about the alternative use of those intrusions or accesses as possible means for disruption and destruction, especially given the destructive incidents we’ve already seen with other Iranian actors.”

Currently APT 34 doesn’t appear to have targeted the United States, but there are many other Iranian hacking groups that have done that already, such as Charming Kitten, the group behind the HBO hack.

Links to Regime

There is evidence that the hackers are working on behalf of the Iranian Regime- as the targets are so different from the traditional hacking targets. Why would ordinary hackers target people who oppose the Regime (i.e. academic scholars, human rights activists, journalists, and dissidents or exiles)?

The Regime has a long history of employing hackers to target their enemies and conduct cyber espionage as part of the Regime’s so-called Cyber Army.

Hultquist said: “This is yet another example of Iranian cyber capability, which only seems to grow every day. It’s a challenge for people who are concerned with Iranian actors, and as geopolitics shifts, the number of people who should be concerned with Iranian actors will probably only increase.”

Latest news

Iran’s Economic Challenges in 2023: Inflation, Investment, and International Relations

As Iran enters the new Persian year, regime experts are raising concerns about the state of the country's economy....

What Gas Poisonings In Iran Tell Us About The Ruling Regime

For months schools in Iran have been in the crosshairs of gas attacks against the country’s children. The mullahs’...

Iran’s Regime Inches Toward Nuclear Weapons

Iran’s regime is once again at the center of a dangerous escalation of the proliferation of nuclear weapons. A...

US Congress Expresses Support for Iranian People’s Quest for a Democratic, Secular Republic

Several bipartisan members of the U.S. House of Representatives have presented a resolution (H. RES. 100) supporting the Iranian...

Wave Of Poisoning Attacks Against Schools Leave Hundreds Sick

Iran has been shaken for three months by serial poisoning attacks against all-girls schools, which has left more than...

Iranian Security Forces Beat Baluch Doctor To Death

On Thursday, February 23, activists in Sistan and Baluchestan provinces reported the news of the death of Dr. Ebrahim...

Must read

Iran flag stunt storm

The Sun: Iranian hatemonger Mahmoud Ahmadinejad sparked fury yesterday...

Brent crude dips as Iran, West plan July talks

Reuters: Brent crude edged lower on Tuesday on relief...

You might also likeRELATED
Recommended to you