Recent reports reveal a complex and controversial cyber involving Iran.
On the one hand, Iran is facing allegations of orchestrating ransomware attacks on various US federal facilities through a group known as Fox Kitten. On the other hand, it has been reported that the Iranian government may have paid millions to a different hacking to prevent sensitive banking data from being published on the dark web.
See also: New data leak after Kadokawa cyberattack
The hacking group IRLeaks, notorious for targeting Iranian entities for financial gain, reportedly demanded a ransom of $10 million in cryptocurrency to prevent the release of stolen information from about 20 domestic banks. As the threat of destabilizing Iran’s financial system was high, the Iranian government was able to negotiate the ransom to $3 million. This payment was made to stop the data leak and prevent further exposure of sensitive information.
Some have speculated that IRLeaks may have connections to the United States and suggested that their actions were intended to create psychological fear among Iranian citizens. However, this claim has been categorically rejected by the Biden administration, which has called it baseless.
In contrast, the Biden administration has accused Iran of developing malware through Advanced Persistent Threat (APT) groups to disrupt critical infrastructure and influence the 2024 US election in favor of former President Donald Trump. The situation has led to an ongoing blame game between the United States, Israel, and Iran, with alleged support from hackers in Moscow and Beijing.
In response to these threats, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI recently issued a joint warning to U.S. and Israeli businesses about Fox Kitten, also known as Rubidium. The advisory revealed that this state-backed group is involved in activities beyond espionage, including data deletion and malware distribution.
Read also: Halliburton: Data stolen in ongoing cyberattack
The evidence also shows that Fox Kitten targets companies in various countries, including Azerbaijan, Australia, Finland, Ireland, France, Germany, Algeria, Turkey, India, and Canada.
Source: cybersecurity-insiders.com
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
