WASHINGTON — A two-week ceasefire between Iran, the United States and Israel was announced, though significant disagreements among the three parties have placed the truce at risk of failing. Shortly after the announcement, the pro-Iranian hacking network Handala said it would temporarily postpone cyberattacks on the U.S. but would continue to target Israel.
Handala, a pro-Palestinian, pro-Iranian network that operates independently of Tehran, vowed to revive its cyberattacks against the U.S. when the time was right. "We did not begin this war, but we will be the ones to finish it," Handala said in a statement. "And let it be clear: The cyber war did not begin with the military conflict, and it will not end with any military ceasefire."
The group is one of several proxy hacking networks allied with Iran. It has claimed credit for disrupting the operations of Stryker, a Michigan-based medical equipment supply company, saying the hack was in retaliation for strikes that killed Iranian schoolchildren. Handala has also claimed credit for hacking into FBI Director Kash Patel's personal email account and leaked several old photos of Patel afterward.
The FBI seized four internet web addresses used by Handala to spread its message. In a joint advisory, the FBI, National Security Agency and Cybersecurity and Infrastructure Security Agency urged organizations that use programmable logic controllers — devices found in ports, power plants and water plants — to ensure their security precautions were up-to-date.
Cybersecurity executive Markus Mueller of Nozomi Networks said he anticipates an increase in cyberattacks on American organizations following the ceasefire. A lull in hostilities would allow hackers to shift from regional targets directly involved in the conflict to efforts to infiltrate U.S. organizations that participated in the war effort, including data centers, tech companies and defense contractors, Mueller said.
"With a ceasefire, we will likely see an expansion of cyber activity both in scale and scope. These groups will likely try to execute a high-profile attack such as what we saw with Stryker," he said. Mueller predicted that some groups based in Iran or Russia may seek to circumvent the truce by launching a significant cyberattack on a U.S. target designed to attract the attention of the American public.
Attacks attributed to pro-Iranian hackers have so far been high in volume but low in impact. They have also been linked to efforts to boost morale among Iran's supporters and remind their opponents of continued vulnerabilities despite their military advantages. Other pro-Iranian hacking groups have been linked to efforts to install malware on the phones of Israelis, penetrate cameras in Middle Eastern countries to improve Iran's missile targeting, and target data centers and industrial facilities in Israel, Saudi Arabia and Kuwait.
Iran, the U.S. and Israel are each claiming victory in the war.
forum Comments (0)
No comments yet. Be the first to comment.