Cybersecurity Company: IRGC-Linked Hackers Have Spied on Aerospace and Defense Organizations in the Middle East

The cybersecurity and information technology company "Mandiant," a subsidiary of Google, has reported the identification of a new threat related to Iranian espionage activities targeting aerospace, aviation, and defense industries in several countries including Israel, the UAE, Turkey, India, and Albania. It is also believed that this activity is linked to a group known as "UNC1549," which bears similarities to the activities of the "Turtle Shell" group associated with the Islamic Revolutionary Guard Corps (IRGC). This group employs various techniques to conceal its activities and has utilized Microsoft Azure infrastructure to engineer two unique "backdoors" named "MiniBike" and "MiniBus." According to the report, this hacking group has designed phishing emails with links to fake websites containing content related to Israel and Hamas or fake job advertisements. The Mandiant report states that the connection between these activities and the IRGC is "noteworthy" given the focus on defense-related entities and recent tensions with the Islamic Republic of Iran in light of the Israel-Hamas war. Recently, Microsoft reported that hackers supported by the Islamic Republic, Russia, China, and North Korea are using "OpenAI" tools supported by the company to enhance their skills and deceive regarding their targets. Microsoft had previously reported that hackers affiliated with the Iranian government disrupted a UAE television network's programming in December by broadcasting a fake report about the Israel-Hamas war. According to Microsoft, IRGC-led hackers disrupted the UAE television network's programming by airing a false or "deep fake" video created by artificial intelligence. Sources: Mandiant, Security Week, Hacker News. The White House: Recent Iranian hacking operations in the U.S. are a new warning to strengthen cybersecurity. Axios: Iranian-backed hackers have increased their activities in the region. Microsoft warns about attacks by Iranian hacker groups on software servers. Microsoft: "ImenNet Pasargad" is responsible for the cyberattack on Charlie Hebdo magazine. The American cybersecurity company states: IRGC hackers are motivated by financial gain.