Iran TerrorismCyber Security Firm Warns About Iran Hacking Threat

Cyber Security Firm Warns About Iran Hacking Threat


Iran Focus

London, 15 Dec – Two cyber security firms have warned the US against underestimate Iranian hackers in the wake of successful operations and advised that they need to be tracked more closely.

These hackers, who target enemies of  Iran and promote the Regime’s political agenda, have become more advanced in their attacks, which led advanced-threat protection firms FireEye and ClearSky to warn that the Regime is fast turning into a cyber crimes giant.


In November, Iranian agents attacked Microsoft Office software in order to target a Middle Eastern government according to FireEye. The suspects are an Iranian cyber-espionage threat group, known as APT34.

This group, more well known as OilRig, has a history of operations that align with Iran’s political agenda, which means that they are likely working under direction from the Regime, and conduct their attacks in a very different way.

Fred Plan, a senior analyst with FireEye, told eWEEK: “One thing that sets the Iranian cyber-espionage groups apart is they are not that reliant on technical solutions. They do not—like the Chinese and Russians—have a pile of zero days. They do a lot more basic social engineering.”

The problem is that the US is also dealing with cyber espionage from other states- like North Korea, China, and Russia- and don’t spend a lot of time on Iran’s operations. This needs to change.

Earlier this month, Israeli cyber-security consultancy ClearSky Cyber Security found that a lot of attacks against human-right activists and media organizations were conducted by Iranian hackers as well. Given the Regime’s relationship with journalists and human rights, it seems likely that they order this attack too.

Plan said: “In the case of Iran, it is [similar] to China and Russia—there is a spectrum of activity and many different actor groups. Some are very closely tied to what the government is doing, while others are nationalistic actors that get together and have a particular set of skills.”

Although Plan wants to be cautious about this, from what we know about the Regime it is unlikely anyone would target enemies of the Regime without being told to.

APT34 has targeted the financial, government, energy, chemical and telecommunications industries in the Middle East, using a spearphishing campaign and the MS Office vulnerability to install malware.

Given their speed at exploiting vulnerabilities, it is hard to believe that they aren’t being funded and instructed by the mullahs.

Latest news

What Gas Poisonings In Iran Tell Us About The Ruling Regime

For months schools in Iran have been in the crosshairs of gas attacks against the country’s children. The mullahs’...

Iran’s Regime Inches Toward Nuclear Weapons

Iran’s regime is once again at the center of a dangerous escalation of the proliferation of nuclear weapons. A...

US Congress Expresses Support for Iranian People’s Quest for a Democratic, Secular Republic

Several bipartisan members of the U.S. House of Representatives have presented a resolution (H. RES. 100) supporting the Iranian...

Wave Of Poisoning Attacks Against Schools Leave Hundreds Sick

Iran has been shaken for three months by serial poisoning attacks against all-girls schools, which has left more than...

Iranian Security Forces Beat Baluch Doctor To Death

On Thursday, February 23, activists in Sistan and Baluchestan provinces reported the news of the death of Dr. Ebrahim...

World Powers Should Hear The Voice Of Iranians, Not Dictators And Their Remnants

Iran’s nationwide uprising continues despite its ups and down. The clerical system’s demise no longer seems a dream but...

Must read

Iran-South Africa trade may reach $10b – minister

Iran Focus: Tehran, Iran, Jul. 31 - Iran’s acting...

Iran’s Khamenei says “has no favorite” to succeed Ahmadinejad

Reuters: Iran's supreme leader, Ayatollah Ali Khamenei, said on...

You might also likeRELATED
Recommended to you