It was the “most elaborate social-engineering campaign” these security researchers had ever seen.
A new report from iSight Partners, a Dallas-based computer-security firm, exposed on Thursday a three-year cyberespionage campaign carried out by Iranian hackers. The digital attacks, which infected about 2,000 U.S. personal computers since 2011, targeted members of the U.S. military and Congress, as well as diplomats, lobbyists, and Washington-based journalists.
The long-term campaign, dubbed “Newscaster” by the security firm, employed a dozen fake social-media accounts on sites such as Facebook, Twitter, and LinkedIn. Hackers sent targets links that, when accessed, would unleash malware. They directed people to fake login screens to steal their user names and passwords. They impersonated journalists and defense contractors, and even set up a fake news website to lure victims.
All signs pointed to Iran as the source. Nicole Perlroth writes in The New York Times:
There were many clues. The fake NewsOnAir.org website was registered in Tehran and sites that hackers used to deploy their malware were also hosted in Iran. The malware that the hackers used contained several Persian words. The time stamps of hackers’ activity tracked with professional working hours in Tehran. They even took the day off on Iranian weekends and holidays.
Another telltale sign, researchers said, was the content the hackers posted on their personas’ social media. In some cases, they posted Iranian jokes to their Facebook pages. One hacker used a Facebook page to ask followers, “What’s kind of sanction will lead to undermining the Iranian nation?”
It’s unclear exactly what information these hackers stole. But the fact that such a highly coordinated attack went unnoticed for several years suggests that the technical skills of Iranian hackers, usually outdone by far-superior Chinese and Russian hackers, are improving. This time last year, a wave of attacks targeting American energy companies was traced to Iran. Back then, U.S. intelligence officials were already worried about Iranian hackers’ growing talents.
What We're Following See More »
The National Defense Authorization Act passed the House this morning by a 375-34 vote. The bill, which heads to the Senate next week for final consideration, would fund the military to the tune of $618.7 billion, "about $3.2 billion more than the president requested for fiscal 2017. ... The White House has issued a veto threat on both the House and Senate-passed versions of the bill, but has not yet said if it will sign the compromise bill released by the conference committee this week."
"Republicans have elected Rep. Greg Walden (R-OR) the next chairman of the powerful House Energy and Commerce Committee. Walden defeated Reps. John Shimkus (R-IL) and Joe Barton (R-TX), the former committee chairman, in the race for the gavel" to succeed Michgan's Fred Upton.
"Democratic and Republican members of the Senate Judiciary Committee are working on legislation that would limit deportations" under President-elect Donald Trump. Leading the effort are Judiciary Committee members Dick Durbin (D-IL) and Lindsey Graham (R-SC). Sen. Jeff Flake (R-AZ) is also expected to sign on.
Donald Trump has selected retired Marine Gen. James 'Mad Dog' Mattis as his secretary of defense, according to The Washington Post. Mattis retired from active duty just four years ago, so Congress will have "to pass new legislation to bypass a federal law that states secretaries of defense must not have been on active duty in the previous seven years." The official announcement is likely to come next week.