\n<\/p>\n
The US government has charged<\/a> and sanctioned<\/a> four Iranian nationals over claims they carried out a yearslong hacking campaign against US government agencies and companies. It also accuses the group of waging these attacks on behalf of the Iranian government.<\/p>\n<\/div>\n An indictment unsealed<\/a> on Tuesday alleges that from around 2016 through at least April 2021, the four individuals waged cyberattacks against \u201cmore than a dozen\u201d US-based companies, along with the US departments of the Treasury and State. The companies targeted by the attacks were \u201cprimarily\u201d contractors for the US Department of Defense that had access to sensitive information.<\/p>\n<\/div>\n The indictment names Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab as the alleged perpetrators. Each of them allegedly worked for Mahak Rayan Afraz, a \u201cfront\u201d company supporting the Iranian Islamic Revolutionary Guard Corps Cyber Electronic Command (IRGC-CEC). The IRGC-CEC has also been linked<\/a> to last year\u2019s cyberattacks on water plants<\/a> in the US.<\/p>\n<\/div>\n As alleged by the DOJ, the group used spearphishing to carry out their cyberattacks, which involves tricking a victim into clicking on a malicious link that installs malware on their computer. The group allegedly managed to access an administrator account belonging to a defense contractor, allowing them to create additional accounts that they used to send spearphishing attempts to other companies. The four Iranian nationals are also accused of using social engineering to impersonate people \u201cto obtain the confidence of victims\u201d as they carried out their attacks.<\/p>\n<\/div>\n \u201cIranian malicious cyber actors continue to target U.S. companies and government entities in a coordinated, multi-pronged campaign intended to destabilize our critical infrastructure and cause harm to our citizens,\u201d Brian Nelson, the Department of the Treasury\u2019s undersecretary for terrorism and financial intelligence, says in a statement. \u201cThe United States will continue to leverage our whole-of-government approach to expose and disrupt these networks\u2019 operations.\u201d<\/p>\n<\/div>\n The DOJ has charged the group with conspiracy to commit computer fraud, conspiracy to commit wire fraud, and wire fraud. It\u2019s offering an up to $10 million reward for anyone with information leading to the location or identification of the four individuals. The US Department of Treasury has also issued sanctions against each of the alleged perpetrators and the front company they used to carry out their attacks.<\/p>\n<\/div>\n