The U.S. Sanctions Two Companies and Four Individuals Linked to Iran's Cyber Operations

The United States has sanctioned two companies and four individuals in connection with the Islamic Republic's malicious cyber operations. The Office of Foreign Assets Control of the U.S. Department of the Treasury announced that these companies and individuals, under the command of the Cyber-Electronic Command of the Islamic Revolutionary Guard Corps (IRGC), targeted dozens of companies and government entities in the U.S. through targeted phishing and malware attacks. Brian Nelson, the Deputy Treasury Secretary for Terrorism and Financial Intelligence, stated, "The malicious cyber actors of the Islamic Republic continue to target American companies and government entities through a coordinated and multifaceted campaign aimed at destabilizing critical infrastructure in the U.S. and harming its citizens." He emphasized that the U.S. will continue its comprehensive approach to exposing and disrupting the activities of these networks. Last March, the cybersecurity and information technology company "Mandiant," a subsidiary of Google, reported identifying a new threat related to Iranian espionage activities that targeted aerospace, aviation, and defense industries in several countries, including Israel, the United Arab Emirates, Turkey, India, and Albania. Microsoft also reported that hackers backed by the Islamic Republic, Russia, China, and North Korea are using "OpenAI" tools supported by the company to enhance their skills and deceive regarding their objectives. The company sanctioned by the U.S. Treasury is "Mehrsam Andisheh Saz Nik," also known as "Mahak Rayan Afzar," which acts as a front company for the IRGC and promotes the Islamic Republic's malicious cyber activities. This company has been linked to several hacking groups, including "Turtle Shell," and other malicious cyber activities, including targeting over twelve U.S. companies and government entities, including the U.S. Department of the Treasury. Among the sanctioned individuals is Alireza Shafiee Nasab, a cyber actor of the IRGC who was previously an employee of "Mahak Rayan Afzar." Reza Kazemi Far Rahman, Hossein Mohammad Harouni, and Kamal Baradaran Salmani are also among those sanctioned by the U.S. Treasury in connection with targeted phishing campaigns that have targeted several American entities, including the Treasury itself.