The US government has warned that hackers linked to Iran may target American companies and operators of critical infrastructure, especially defense organizations that cooperate or have relations with Israeli research and defense firms.
The Federal Bureau of Investigation (FBI), National Security Agency (NSA), Department of Defense Cyber Crime Center (DC3), and the Department of Homeland Security's civilian cybersecurity division issued a bulletin on Monday stating that while there are currently no signs of Iran-related malicious cyber activity, all organizations should ensure their defense systems remain up to date.
The report pointed out: "Despite the fact that (Israel and Iran) have announced a ceasefire and are engaged in ongoing negotiations toward a permanent solution, cyber actors and hacker organizations associated with Iran may still carry out malicious cyber activities."
Relevant federal agencies stated that Iranian government-backed hackers exploit existing vulnerabilities in unpatched or outdated software, compromise networked accounts and devices using default or weak passwords, and collaborate with ransomware operators to encrypt, steal, and leak sensitive information.
Iranian Hackers Threaten to Disclose More Emails
In addition, hackers linked to Iran have threatened to release more emails stolen from the inner circle of US President Trump.
The group, under the alias "Robert," conducted an online chat with Reuters on June 29 and 30.
They claimed to possess about 100GB of emails. These emails are from White House Chief of Staff Wiles, Trump attorney Halligan, Trump advisor Stone, and adult film star Daniels, who is involved in Trump's hush money case.
"Robert" did not describe the content of these emails but suggested the possibility of selling this material.
"Robert" surfaced in the final few months of the 2024 US presidential campaign, claiming to have hacked email accounts belonging to several of Trump's key confidantes, including Wiles, and subsequently sent the emails to the media.