Threat Actor Delivers Highly Targeted Multistage Polyglot Malware

In fall 2024, UNK_CraftyCamel leveraged a compromised Indian electronics company to target fewer than five organizations in the United Arab Emirates with a malicious ZIP file that leveraged multiple polyglot files to eventually install a custom Go backdoor dubbed Sosano. Read More …

CIA employee pleads guilty over leak of classified Israeli plans

A CIA employee who was accused of leaking classified documents about Israel’s plans to strike Iran pleaded guilty on Friday to criminal charges that he willfully retained and transmitted national defense information, the U.S. Department of Justice said. In pleading Read More …

Shin Bet finds 200 Iranian cyberattacks on Israeli personalities

In recent months, the Shin Bet (Israel Security Agency) has uncovered some 200 efforts made by Iranian hackers to target Israeli civilians, the Shin Bet stated on Monday. The hacking was conducted via phishing attempts against various individuals, including Israeli Read More …

New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad

The Federal Bureau of Investigation (FBI), U.S. Department of Treasury, and Israel National Cyber Directorate are releasing this Cybersecurity Advisory (CSA) to warn network defenders of new cyber tradecraft of the Iranian cyber group Emennet Pasargad, which has been operating Read More …

U.S. Investigating Intelligence Leak About Israel’s Plans for Attacking Iran

The U.S. is investigating the leak of top-secret American documents that show Israel military preparations for an expected strike on Iran, U.S. officials said Sunday. The two leaked reports were prepared last week by the National Geospatial-Intelligence Agency, which analyzes Read More …

Iranian Cyber Actors Targeting Personal Accounts to Support Operations

The Federal Bureau of Investigation (FBI), U.S. Cyber Command – Cyber National Mission Force (CNMF), the Department of the Treasury (Treasury), and the United Kingdom’s National Cyber Security Centre (NCSC) are disseminating this joint Cybersecurity Advisory (CSA) to highlight continued Read More …

UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks

UNC1860 is a persistent and opportunistic Iranian state-sponsored threat actor that is likely affiliated with Iran’s Ministry of Intelligence and Security (MOIS). A key feature of UNC1860 is its collection of specialized tooling and passive backdoors that Mandiant believes supports Read More …

Nine killed, 2,750 wounded across Lebanon as Hezbollah pagers explode

At least nine people were killed and about 2,750 were wounded by exploding handheld pagers across Lebanon, the country’s health minister has said. Firass Abiad said that an eight-year-old girl was among those killed and that more than 200 people Read More …

Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense Cyber Crime Center (DC3) are releasing this joint Cybersecurity Advisory (CSA) to warn network defenders that, as of August 2024, a group of Read More …

FBI investigating attempts to hack Biden-Harris and Trump campaigns

Federal investigators are looking into whether Iranian hackers targeted individuals associated with the Trump and Biden-Harris campaigns, three people familiar with the investigation confirmed to CBS News. The FBI launched the probes in the early summer, after both presidential campaigns Read More …