GCHQ has recently issued an alert warning about cyber attackers operating on behalf of the Iranian government. The National Cyber Security Centre (NCSC), a division of GCHQ, has highlighted a specific threat from targeted phishing attacks carried out by hackers linked to Iran’s Islamic Revolutionary Guard Corps (IRGC).
According to the alert, these cyber attackers are using “social engineering” techniques to gain unauthorized access to personal and business accounts online. Individuals with connections to Iranian and Middle Eastern affairs, including current and former senior government officials, leading think tank personnel, journalists, activists, and lobbyists, are particularly at risk.
Notably, the US has also raised concerns about individuals associated with US political campaigns being targeted by these phishing attacks. The hackers may employ various tactics such as impersonating family members, well-known journalists, discussing foreign policy topics, or sending invitations to conferences to trick their victims.
Paul Chichester, the director of operations at the National Cyber Security Centre, emphasised the persistent threat posed by these spear-phishing attacks. He encouraged those at higher risk to remain vigilant and make use of the NCSC’s cybersecurity tools to enhance their protection against such malicious activities.
The Iranian hackers have been known to impersonate contacts via email and messaging platforms, building trust with their targets before luring them into sharing sensitive information or credentials. This kind of “spear phishing” can lead to unauthorised access to victims’ accounts, allowing the attackers to exfiltrate and delete messages, as well as set up email forwarding rules.
The NCSC’s alert underlines that this cyber threat extends beyond the UK and underscores the need for targeted individuals to follow mitigation steps and utilise special support measures offered for their protection. US intelligence agencies have reported instances where Iranian hackers accessed and disseminated material from Donald Trump’s presidential campaign to officials in the Biden campaign and journalists during the summer.
In conclusion, individuals with heightened exposure to cyber threats due to their professional or public profiles are strongly advised to remain cautious and take advantage of the NCSC’s cybersecurity resources to safeguard themselves against such cyber attacks.