The Iranian Atomic Energy Agency suffered a data breach, which is said to have caused the leak of thousands of email messages. Both the agency and the Black Reward group, which appears to be behind the attack, have their own versions of the events.
See also: Interpol created a global Metaverse police force
The attackers are reported to have breached an email server belonging to one of the organization’s subsidiaries, gained access to 324 inbound messages and stole more than 100,000 emails – which correspond to about 50 GB of data.
In a recent press release, the agency announced that the data leak was carried out by a foreign threat actor in an attempt to steal information and attract attention. The breach has no other value beyond that.
See also: Daixin Team: Targets insecure VPN servers
The protests of Mahsa Amini receive our support
A group claiming to be domestic hackers named Black Reward communicated via Telegram and stated that they carried out the attack as an act of support for the protesters in Iran.
From the death of Mahsa Amini – a young woman who was arrested because she did not follow Iran's strict dress code – protests are raging in the country. It is alleged that the group behind the protests has threatened to leak data online if the authorities do not release political prisoners and other individuals who have been arrested during the demonstrations.
Iran’s Atomic Energy Organization claims that the stolen data is not valuable and mainly contains “technical messages,” while the Black Reward group claims otherwise. The Register has discovered that the group is correct, and the data includes decrypted versions of administrative passwords, operating schedules for various parts of the Bushehr power plant, passports and visas Iranian and Russian specialists working there, etc.
See also: Windows zero-day: JavaScript files bypass MoTW
To prove that it was telling the truth, the group began sharing this sensitive information, but advised interested parties to only access it through a virtual machine since the organization's emails are unfortunately infected with viruses and other malware.
Information source: techradar.com
