4 Iranians indicted for cyber-attacks on US agencies and defense firms

4 Iranians indicted for cyber-attacks on US agencies and defense firms

US authorities unveil indictments against four Iranian individuals for orchestrating a wide-ranging cyber-attack operation aimed at US federal agencies and confidential information belonging to American defense contractors.

US prosecutors have revealed charges against four Iranian men for a widespread hacking operation aimed at US federal agencies and confidential information from American defense contractors. The hackers allegedly targeted the US State and Treasury departments, along with over a dozen US companies, including Pentagon contractors handling classified data. These charges were announced in an unsealed indictment in the Southern District of New York.

The hacking operation occurred between 2016 and 2021, affecting over 200,000 devices. Damian Williams, the US attorney general for the Southern District of New York, revealed that many of these devices stored sensitive defense information when announcing the initial charges in February.

It remains uncertain if the State or Treasury departments' networks were breached in this cyberattack. CNN has reached out to these agencies for their comments.

Hacking has been a long-standing source of tension in the relationship between the US and Iran. In 2022, FBI Director Christopher Wray accused Iranian government-backed hackers of a cyberattack on Boston Children’s Hospital, describing it as "despicable." Tehran denied any involvement.

In a recent indictment unsealed on Tuesday, individuals Hossein Harooni, Reza Kazemifar, Alireza Shafie Nasab, and Komeil Baradaran Salmani were charged with wire and computer fraud, among other offenses. Nasab had previously been charged in a separate indictment unsealed in the Southern District of New York in February.

The Justice Department has reported that the men, who are all in their 30s, are still on the run.

According to prosecutors, three of the men have been accused of being employed by a front company in Iran that claimed to provide cybersecurity services.

The Treasury Department imposed sanctions on four men for their alleged ties to the Islamic Revolutionary Guard Corps, a branch of Iran’s military. In addition, the State Department offered a reward of up to $10 million for information that could help identify or locate these individuals.

CNN reached out for a response from the Iranian Permanent Mission to the United Nations.

Attorney General Merrick Garland stated that criminal activity coming from Iran is a serious threat to America's national security and economic stability in a recent announcement of new charges.

Editor's P/S:

The recent unsealing of charges against Iranian hackers exposes the growing threat of cyberattacks and the heightened tensions between the US and Iran. The allegations of widespread hacking targeting sensitive US agencies and defense contractors highlight the sophistication and malicious intent behind these cyber operations. The fact that these individuals remain at large raises concerns about the ongoing vulnerability of American infrastructure and the need for robust cybersecurity measures.

The indictment serves as a reminder of the geopolitical dynamics at play in the digital realm. The involvement of government-backed hackers underscores the potential for state-sponsored cyberattacks, which can have significant consequences for national security and economic stability. The ongoing investigation and sanctions imposed on the accused individuals demonstrate the US government's determination to address these threats and hold the perpetrators accountable. However, the challenges of identifying and apprehending cybercriminals operating from foreign jurisdictions pose significant obstacles to justice. International cooperation and collaboration are crucial to combating the growing menace of cyberattacks and protecting the integrity of global networks.