The U.S. government has issued a significant warning about increasing cyber threats from Iranian-backed hackers, who are targeting essential American infrastructure with the intention of creating disruption. This alert comes through a collaborative advisory from the FBI, National Security Agency, Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Energy, indicating a marked escalation in cyber-attacks from Iranian state-sponsored groups.
The agencies reported that these hackers have been exploiting internet-connected systems within various sectors, including water and wastewater utilities, energy, and local government services. While specific targets were not mentioned, the advisory highlighted that the attacks had already caused notable operational disruptions and financial losses in the U.S.
The hackers focused on programmable logic controllers (PLCs) and supervisory control and data acquisition (SCADA) systems, which are critical for managing industrial operations. They managed to alter the data presented on these systems and tampered with project files that contain crucial device configurations.
This recent surge in cyber activity is believed to be a direct response to escalating tensions between the U.S. and Iran, particularly following the onset of the U.S.-Israel conflict, which intensified after airstrikes on Iranian leadership on February 28. These cyber-attacks coincide with heightened rhetoric, including a threatening social media post from former President Trump, stating that “a whole civilization will die tonight” if Iran does not agree to terms concerning the vital Strait of Hormuz.
Furthermore, the Iranian hacking group known as Handala has been implicated in several significant cyber incidents, notably a breach of U.S. medical technology company Stryker, where they remotely wiped thousands of employee devices using the company’s security resources. Additionally, Handala has been associated with leaking sensitive information from the private email account of the FBI director.
Iran has also conducted missile and air strikes against U.S.-owned data centres in the region, disrupting cloud services and adding to the instability in the area. The advisory underscores the serious threat posed by these cyber-attacks and the ongoing geopolitical tensions that fuel them. As the situation develops, the threat to critical infrastructure remains a pressing concern for national security agencies in the United States.
Fanpage: TechArena.au
Watch more about AI – Artificial Intelligence
