Iranian APTs increased activity against US industries in late spring, researchers say
Nozomi Networks recorded 28 Iran-linked attacks on US customers in May-June, up 133%, mostly hitting transportation and manufacturing.
Nozomi Networks telemetry showed 28 Iran-linked attacks against customers in May and June versus 12 in the prior two months, a 133% increase focused on transportation and manufacturing. MuddyWater was the most active group, targeting at least five US companies, followed by APT33 with at least three; OilRig, CyberAv3ngers, FoxKitten and Homeland Justice were also active. In a separate report, Morphisec said Fox Kitten is recruiting ransomware affiliates with an 80% share of proceeds for attacks against Iran's adversaries, including the US and Israel. The activity comes amid heightened concerns over Iranian cyber retaliation after US strikes on Iranian nuclear facilities.
- Iran-linked attacks on Nozomi customers rose 133% to 28 in May-June
- MuddyWater targeted at least five US firms; APT33 at least three
- Transportation and manufacturing were the most targeted sectors
- Fox Kitten raised affiliate ransom share to 80% for attacks aligned with Tehran
- US agencies had warned critical infrastructure operators of possible Iranian retaliation
- Vendors
- Nozomi NetworksMorphisec
- Countries
- United StatesIranIsrael
From the original article
2 min read at therecord.media
Iranian state-backed hackers appeared to step up their attacks on U. S. industries over the past two months, according to new research.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.