ديجيتال فابلت

الوسم: cyber-attack

  • Iranian hackers hack FBI director’s email, leak photos and files

    Iranian hackers hack FBI director’s email, leak photos and files

    Iran-linked hackers have successfully infiltrated the personal email account of FBI Director Kash Patel, releasing numerous photographs and over 300 emails online, according to both the hackers and the FBI on Friday.

    The hacking group, Handala Hack Team, which claims ties to Iranian cyber intelligence, posted on their website that Patel “will now find his name among the list of successfully hacked victims.” They shared personal photos of Patel engaging in activities such as smoking cigars, riding in a vintage convertible, and making faces while posing with a large bottle of rum.

    The FBI has acknowledged that Patel’s emails were targeted. FBI spokesperson Ben Williamson stated, “We have taken all necessary measures to mitigate potential risks from this activity,” emphasizing that the compromised data was “historical in nature and does not involve any government information.”

    Handala, which positions itself as a pro-Palestinian vigilante hacking group, is widely considered by Western analysts to be a persona used by Iranian government cyber units. The group recently claimed responsibility for a March 11 breach of Michigan-based medical equipment and services provider Stryker, asserting they erased a large cache of corporate data.

    In addition to the photographs, the hackers released a sample of more than 300 emails, which appear to cover both personal and professional correspondence from 2010 to 2019. While Reuters could not independently authenticate the emails, the personal Gmail account linked to Handala matches previous leaks tied to Patel, according to dark web intelligence firm District 4 Labs. Google, which manages Gmail, has not yet responded to inquiries.

    Iran-linked hackers have increasingly brazenly publicized their cyber activities as tensions escalate between the U.S. and Iran. Besides the Stryker breach, Handala claimed on Thursday to have leaked the personal data of numerous Lockheed Martin employees based in the Middle East. Lockheed Martin responded by stating it has policies to address cyber threats.

    Cybersecurity experts suggest that these operations aim to destabilize and humiliate U.S. officials by exposing their vulnerabilities, a tactic Iran appears to be employing more openly as hostilities heighten. Such breaches of high-profile individuals’ personal emails are not unprecedented; past incidents include the hacking of Hillary Clinton’s campaign chairman John Podesta in 2016 and data leaks from then-CIA Director John Brennan’s AOL account in 2015.

    An intelligence assessment reviewed by Reuters on March 2 indicates that Iran and proxy groups may respond to recent U.S. military actions against Iran with low-level cyberattacks targeting American networks, illustrating a pattern of increased cyber retaliation.

    Harboring additional emails, Iran-linked hacking groups might have further damaging information in reserve. Last year, a group claiming to be “Robert” indicated intentions to release 100 gigabytes of data stolen from U.S. officials close to President Trump, including White House Chief of Staff Susie Wiles, though Reuters has been unable to verify this claim, and the group has been unresponsive in recent months.

  • UAE disrupts planned cyber strikes on critical digital sectors

    UAE disrupts planned cyber strikes on critical digital sectors

    The UAE has successfully prevented organized cyber attacks aimed at its digital infrastructure and critical sectors, according to the state news agency on Saturday. These assaults involved attempts to breach networks, distribute ransomware, and carry out coordinated phishing operations targeting key national platforms. Authorities also revealed that artificial intelligence tools had been utilized to create offensive cyber capabilities.

    The Cybersecurity Council emphasized from the outset that safeguarding individuals, protecting personal data, and maintaining essential services are paramount. The country’s cybersecurity and cyber defense systems continue to operate effectively, ensuring high levels of protection and resilience.

    Recent security incidents highlighted ongoing efforts by malicious actors to infiltrate networks and compromise sensitive systems. Citizens are encouraged to stay vigilant and report any suspicious cyber activities through official channels to help maintain the nation’s digital safety and ensure uninterrupted government and business operations.

  • UK Foreign Office Suffers Data Breach Attack

    UK Foreign Office Suffers Data Breach Attack

    A UK government official announced on Friday that an investigation is ongoing following a data breach at Britain’s Foreign Office in October. Trade Minister Chris Bryant confirmed that the Foreign, Commonwealth & Development Office (FCDO) was targeted, but downplayed reports linking Chinese hackers to the attack.

    This breach occurred after it was revealed in July that a Ministry of Defence employee accidentally exposed a document with the names and details of nearly 19,000 Afghans seeking relocation to the UK. Sensitive information of over 100 Britons, including intelligence operatives and special forces members, was also compromised.

    Bryant characterized the recent incident as “relatively low risk” and stated, “We’ve been investigating since October and have addressed the issue.” A report by The Sun indicated that a cybercriminal group called Storm-1849, accused of targeting critics of Beijing, might have been behind the breach.

    When asked if Chinese involvement could be ruled out, Bryant responded that he did not know. A government spokesperson emphasized that authorities are actively examining the incident and that they take the security of their systems and data very seriously.

    Cybercriminal groups have historically attacked UK institutions such as hospitals, postal services, luxury brands, and retailers.

  • Hackers Claim possession of 100GB of Trump Aides’ Emails, Threaten to Leak

    Illustrative image of a hacker. — AFP File
    Illustrative image of a hacker. — AFP File

    WASHINGTON: Hackers believed to be associated with Iran have threatened to release additional emails obtained from individuals in President Donald Trump’s circle, following the distribution of a previous set to the media prior to the 2024 U.S. election.

    In conversations with Reuters over the weekend, the hackers, who use the alias “Robert,” claimed to possess roughly 100 gigabytes of emails sourced from the accounts of White House Chief of Staff Susie Wiles, Trump’s attorney Lindsey Halligan, adviser Roger Stone, and adult film star-turned-Trump critic Stormy Daniels.

    While Robert suggested they might consider selling the data, no specific plans were divulged. The group did not disclose the details within the emails.

    U.S. Attorney General Pam Bondi labeled the hacking incident as “an inexcusable cyber-attack.”

    Both the White House and FBI have stated that individuals involved in any breach of national security will face thorough investigations and severe penalties, according to FBI Director Kash Patel.

    No responses were received from Halligan, Stone, Daniels’ representative, or the U.S. cybersecurity agency CISA. Iran’s mission to the United Nations also declined to comment, with Tehran previously denying any participation in cyber espionage.

    The hacking group Robert emerged during the closing weeks of the 2024 presidential campaign, claiming to have hacked the email accounts of several Trump associates, including Wiles, and later distributed select emails to journalists.

    Reuters had previously verified some of the leaked information, which included an email indicating a financial agreement between Trump and the lawyers of former presidential candidate Robert F. Kennedy Jr., who is now Trump’s health secretary. Further leaks encompassed internal communications regarding Republican candidates and discussions about legal settlements with Daniels.

    Although the leaks garnered some press coverage last year, they did not significantly alter the outcome of the presidential election, which Trump won.

    In September 2024, the U.S. Justice Department accused Iran’s Revolutionary Guards of orchestrating the Robert hacking scheme. The hackers chose not to address these allegations.

    After Trump’s victory, Robert informed Reuters that no further leaks were anticipated, stating in May, “I am retired, man.” However, activity resumed following this month’s 12-day conflict between Israel and Iran, which resulted in U.S. strikes on Iran’s nuclear facilities.

    This week, Robert indicated they were preparing to sell the stolen emails and urged Reuters to convey this matter.

    Frederick Kagan, a scholar at the American Enterprise Institute and an authority on Iranian cyber activity, remarked that Iran’s intelligence services might be looking to retaliate without escalating military tensions. “A likely explanation is that everyone’s been instructed to utilize all available asymmetric tactics without provoking a major military response from Israel or the U.S.,” he noted. “Releasing more emails is unlikely to trigger such a response.”

    While there were concerns about potential serious cyberattacks from Iran, the hackers remained mostly inactive during the recent conflict. However, U.S. cyber officials issued a warning on Monday that Tehran might still target American businesses and critical infrastructure.