Iran-linked hackers may target U.S. firms and critical infrastructure, U.S. government warns
June 30 (Reuters) - Iranian-affilited hackers may target U.S. companies and critical infrastructure operators, particularly defense organizations with holdings or relationships with Israeli research and defense firms, according to an advisory from U.S. government officials Monday.
The FBI, National Security Agency, the Department of Defense Cyber Crime Center (DC3) and the Department of Homeland Security's civilian cybersecurity defense wing said in a statement, opens new tab issued alongside the advisory that while there are no indications of a coordinated Iranian-linked malicious cyber campaign so far, organizations should ensure their defenses are up to date.
"Despite a declared ceasefire and ongoing negotiations towards a permanent solution, Iranian-affiliated cyber actors and hacktivist groups may still conduct malicious cyber activity," the agencies said in the advisory, opens new tab.
Cybersecurity researchers and defenders in Israel and the U.S. have so far seen little Iranian-linked cyber activity of consequence in the wake of the war launched by Israel June 13, followed by U.S. strikes on Iranian nuclear facilities June 22.
Iranian state-sponsored hackers are known to exploit existing vulnerabilities in unpatched or outdated software and compromise internet-connected accounts and devices that use default or weak passwords, as well as work with ransomware operators to encrypt, steal and leak sensitive information, the agencies said Monday.
In November 2023, hackers said by the U.S. government, opens new tab to be affiliated with the Iranian Revolutionary Guards hacked equipment located in water and wastewater treatment systems in multiple states. The attacks targeted an Israeli-made device and came shortly after the October 2023 Hamas attacks on Israel.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Guardian
20 minutes ago
- The Guardian
Trump officials create searchable national citizenship database
The US Department of Homeland Security has for the first time built a national citizenship database that combines information from immigration agencies and the social security administration. The database was created in collaboration with the 'department of government efficiency' (Doge) in an effort to bridge the gaps between disparate information sources to make it easier to determine whether someone is a citizen, according to NPR, which first reported the details of the database. The database is the result of an expansion of the systematic alien verification for entitlements (Save) program, made up of smaller databases within the homeland security department, and an integration with information from the Social Security Administration. The centralized repository is searchable and can be accessed by state and local election officials to look up the names of anyone trying to vote to determine if they are citizens, according to NPR. Until now, election officials had to ask potential voters for documents verifying their citizenship or rely on a hard-to-navigate patchwork of databases. In response to a request for comment, the DHS said: 'Integration with the Social Security Administration (SSA) significantly improves the service offered by Save.' Previously, agencies involved in voting were required to use numbers issued by the DHS to look up voter registrations, which they may not have had access to but may have been more likely to possess social security numbers, according to the statement. The citizenship database may also soon integrate state department of motor vehicles (DMV) data, NPR reported. The DHS statement also describes the motivations for the creation of the database: 'Under the leadership of President Trump and Secretary Noem, USCIS is moving quickly to eliminate benefit and voter fraud among the alien population.' Voter fraud is rare in the US, experts say; consequences include fines or jail time. The citizenship database is one of the first results of Doge's efforts to gain access to and merge information on Americans from agencies across the federal government, including the Internal Revenue Service, in the first few months of the Trump administration. Reports indicate Doge is attempting to create a single data hub that enables access to these vast troves of information on Americans in an effort to eliminate the separation of information in isolated or protected silos. The attempt to connect various sources of personal information, which Doge has said is needed to root out fraud, and allow it to be accessed in one place has sparked several lawsuits. In response, union members in Maryland have sued the office of personnel management, the treasury department and the education department for sharing personal information with Doge officials 'who had no need to know the vast amount of sensitive personal information to which they were granted access', according to their suit. 'Defendants admit that the [Social Security Administration] granted Doge personnel broad access to millions of Americans' sensitive PII [personally identifiable information],' US district judge Ellen Lipton Hollander of Maryland wrote in a decision ordering a temporary block on the Social Security Administration sharing information with Doge. 'This intrusion into the personal affairs of millions of Americans – absent an adequate explanation for the need to do so – is not in the public interest.' The database in question was created with little engagement of the public, something that is requisite for building these types of mass surveillance databases. The Privacy Act of 1974 requires federal agencies to notify the public if there are new ways they plan to use or collect Americans' personal information. Legal experts have also questioned whether this sort of a centralized database sidesteps many of the privacy and security protections implemented within each agency. The consolidation of personal information into a mass database is unprecedented and has sparked concern among immigration and privacy advocates. The creation of a centralized repository brings together pieces of information that were previously within the purview of separate agencies, and potentially makes it easier for government officials to look up individual's data from across the government. Many worry about how else this database could be used. 'The premise of noncitizen voter fraud is one that officials, including President Trump, have used as a pretext to discredit and intimidate entire communities,' said Citlaly Mora, spokesperson for immigration legal project Just Futures Law. Sign up to TechScape A weekly dive in to how technology is shaping our lives after newsletter promotion 'This database is the latest iteration of Doge's attempt to weaponize the data of the millions of people that live in the US They are building this database without transparency and without consulting the public about how their data will be used, a brazen violation of our privacy rights. Given this administration's track record of failing to follow proper processes, we should all be concerned.' The rollout of the citizenship database, which is an upgraded version of an existing network of data sources, comes after the New York Times reported that software firm Palantir was selected to help develop a 'mega-database' for the Trump administration. In a letter to the company, 10 Democratic lawmakers said the database, which would collect the tax and other personal information on all Americans in a single repository, would potentially be a violation of federal law. 'The unprecedented possibility of a searchable 'mega-database' of tax returns and other data that will potentially be shared with or accessed by other federal agencies is a surveillance nightmare that raises a host of legal concerns, not least that it will make it significantly easier for Donald Trump's administration to spy on and target his growing list of enemies and other Americans,' the letter reads. Palantir has repeatedly denied that it was building a master database. It said: 'Palantir is neither conducting nor enabling mass surveillance of American citizens. We do not operate the systems, access the data, or make decisions about its use.'
The Independent
29 minutes ago
- The Independent
US brings charges in North Korean remote worker scheme that officials say funds weapons program
The Justice Department announced criminal charges Monday in connection with a scheme by North Korea to fund its weapons program through the salaries of remote information technology workers employed unwittingly by U.S. companies. The charges are part of what law enforcement officials described as a nationwide operation that also resulted in the seizure of financial accounts, websites and laptops that were used to carry out the fraud. Two separate cases — one filed in Georgia, the other in Massachusetts — represent the latest Justice Department effort to confront a persistent threat that officials say generates enormous revenue for the North Korean government and in some cases affords workers access to sensitive and proprietary data from the corporations that hire them. The scheme involves thousands of workers who, armed with stolen or fake identifies of U.S. citizens, are dispatched by the North Korean government to find work as remote IT employees at American companies, including Fortune 500 corporations. Though the companies are duped into believing the workers they had hired were based in the U.S., many are actually stationed in North Korea or in China and the wages they receive are transferred into accounts controlled by co-conspirators affiliated with North Korea, prosecutors say. "These schemes target and steal from U.S. companies and are designed to evade sanctions and fund the North Korean regime's illicit programs, including its weapons programs,' Assistant Attorney General John Eisenberg, the head of the Justice Department's National Security Division, said in a statement. In one case exposed on Monday in federal court in Massachusetts, the Justice Department said it had arrested one U.S. national and charged more than a half dozen Chinese and Taiwanese citizens for their alleged roles in an elaborate fraud that prosecutors say produced at least $5 million in revenue and affected more than 100 companies. The defendants are accused of registering financial accounts to receive the proceeds and creating shell companies with fake websites to make it appear that the workers were connected to legitimate businesses. They also benefited from the help of unidentified enablers inside the United States who facilitated the workers' remote computer access, tricking companies into believing the employees were logging in from U.S. locations. The Justice Department did not identify the companies that were duped, but said that some of the fraudulent workers were able to gain access to and steal information related to sensitive military technology. The case filed in Georgia charges four North Korean nationals with using fake identities to gain access to am Atlanta-based blockchain research and development company and stealing hundreds of thousands of dollars in virtual currency. The Justice Department has filed similar prosecutions in recent years, as well as created an initiative aimed at disrupting the threat.
Sky News
30 minutes ago
- Sky News
Diddy trial latest: Deliberations begin in Diddy trial - as jury sends note to judge
The jury have begun deliberations in trial of Sean "Diddy" Combs. It comes after a closing argument last week by the music mogul's defence that upped the stakes for the rapper and his accusers. Follow the latest below. 20:38:56 Sketches from the courtroom There have been no cameras in court throughout this trial - because the trial is being held in a federal court. So court sketchers have been there to paint a picture of the atmosphere each day. Artist Jane Rosenberg sketched these images of Sean "Diddy" Combs in the courtroom earlier today. In the first, he confers with his legal team, while in the second he passes a note to one attorney, Marc Agnifilo. The final picture shows Judge Arun Subramanian. 19:36:00 Watch: 'The stakes could not be higher for Diddy' Our US correspondent Martha Kelner is outside the courtroom in Manhattan, New York, as jury deliberations continue. She says Sean "Diddy" Combs spoke to family members after the jurors had been sent out. 18:39:31 Jurors send note After deliberating for just over an hour, jurors sent a note. Both legal teams and Sean "Diddy" Combs returned to the courtroom to hear the details. Jurors say they are concerned there is an issue with one member of the panel not following the judge's instructions. Judge Arun Subramanian asked prosecutors and Combs's defence lawyers for their suggestions on what he should do in response to the jury note. "We have a juror, number 25, who we are concerned cannot follow your honour's instructions," the note said. However, it did not elaborate on which instructions the juror cannot follow. It is not clear yet what will happen next, but there are alternate jurors who have heard the case. We will bring you updates as soon as we have them. 16:33:12 Jury begins deliberations Judge Arun Subramanian gives jurors more instructions about several issues, including the use of pseudonyms, witnesses who testified after being granted immunity, and the defendant's right not to testify - as Sean "Diddy" Combs chose not to. He then tells them they will retire to consider the case, to determine if the prosecutuion has proved Combs's guilt or not. All 12 jurors must be present during deliberations, the judge says, and the decision must be unanimous. They retire to begin their deliberations at 11.30am in New York, so 4.30pm here in the UK. Usual court hours are 9am to 5pm (2pm to 10pm in the UK), but the judge says they can stay later to deliberate if they choose to. We will report back with updates from the courtroom as soon as we have any updates. 16:14:49 Sex-trafficking and transportation for prostitution charges The judge has instructed jurors on the two sex-trafficking charges and the two charges of transportation to engage in prostitution. One charge of sex trafficking and one of transportation to engage in prostitution relate to Cassie Ventura, between about 2009 and 2018. One charge of sex trafficking and one of transportation to engage in prostitution relate to Jane*, who testified under a pseudonym, between 2021 and 2024. 15:43:06 What is racketeering conspiracy? Racketeering broadly means engaging in an illegal scheme or enterprise, and the charge falls under the Racketeering Influenced and Corrupt Organisations Act (RICO) in the US. According to the US justice department's definition of RICO statute, it is also illegal to "conspire to violate" the laws. Combs is accused of violating the statute between 2004 and 2024. Racketeering conspiracy is an agreement between two or more people to commit a crime, the judge says. This doesn't have to be a formal agreement, but can be a mutual understanding, spoken or unspoken. The eight acts Combs is accused of that fall under the racketeering charge are: Kidnapping Arson Bribery Witness tampering Forced labour Sex trafficking Transportation to engage in prostitution Possession with intent to distribute drugs Racketeering conspiracy carries a maximum sentence of life in prison. 15:05:26 Judge takes jurors through the charges against Diddy Jurors are now being given the details of the five charges. Count 1 - racketeering Count 2 - sex-trafficking of Cassie Ventura Count 3 - transporting individuals including but not limited to Cassie Ventura to engage in prostitution Count 4 - sex-trafficking of Jane* Count 5 - transporting individuals including but not limited to Jane to engage in prostitution Jane*, a former girlfriend of Combs's, is not her real name. She testified using a pseudonym. Jurors must return a separate verdict of not guilty or guilty for each charge, and analyse the evidence separately for each count. 14:56:45 'Did the witness tell the truth?' Judge Arun Subramanian reminds jurors that Sean "Diddy" Combs has pleaded not guilty and his defence team does not need to prove his innocence - the prosecution has the burden of proving his guilt beyond a reasonable doubt. What does this mean? It is a doubt based on reason, judgement and common sense, the court hears. Jurors have heard direct evidence, from exhibits shown in court and witnesses who have testified about what they personally saw, as well as circumstantial evidence, which is indirect by proof of other facts. It is the jury's job to determine the credibility of the witnesses, the judge says. "There is no magic formula." Again, he tells jurors to use their common sense, judgement and experiences in life, and says they can take into account inconsistencies or contradictions in testimony. "The ultimate question for you to decide is: did the witness tell the truth?"
