Iran In The Firing Line

In the Middle East there has been an increased role of cyber war and cyber security, much as the region is also at the forefront of experiments with new weapon systems.

Iran reported three cyber-attacks, within one week last December. At least one of the attacks was allegedly "state-sponsored." the governmant has claimed, saying that two of the these attacks in were repelled by the country's security shield, known as Digital Fortress or Dezhfa, which it is claimed has helped repel 33 million cyber attacks against the country in 2019

This month Iranian officials say that hackers damaged a small number of computers in a failed cyber-attack against the port of Bandar Abbas, the country's largest port in the Strait of Hormuz. 

Details about the cyber attack remain unknown, although recent cyber attacks have managed to damage a number of private systems at the Shahid Rajaei port near Bandar Abbas and the Strait of Hormuz, said Mohammad Rastad, Managing Director of the Ports and Maritime Organisation. 

Iran is currently in the process of developing a national Internet system, known as the National Information Network (NIN), in order to cut the country's dependency on international cyberspace. The network will also prevent Virtual Private Networks (VPNs) from helping Iranians bypass the Islamic Republic's censorship of the Internet, as data requests won't be routed outside the country. The plan was first announced in 2010 with an expected completion date in 2015. In May, the Supreme Council of the Cultural Revolution announced that the NIN is 80% complete.

The Intranet would allow the government to decide what content can be accessed by users, removing the need for absolute shutdowns like the one imposed during the protests.

Some Iranian newspapers warned the government against imposing such a decision on citizens, as things could easily spark out of control as they did after gasoline prices were raised in a sudden decision by the nation's leadership, according to an Iranian opposition group. A state-run daily called the announcement a "threatening message to the people," while another daily asked, "will the people and the private sector tolerate the Internet shutdown?"

This month, Israel's security cabinet met to discuss an alleged Iranian cyber attack on Israeli water and sewage facilities that took place in April. The attack did not cause substantial damage except for a few issues in local water systems, according to Israeli officials, but is still seen as a substantial escalation by the Iranians, especially since the target was civilian infrastructure.

Iran-linked hackers have targeted US-owned drug company Gilead Sciences Inc. in recent weeks as the firm scrambles to develop treatments for the Covid-19 virus. The hackers posed as journalists and sent emails to Gilead employees that were intended to trick them into sharing their passwords. It is not known whether any of the attempted attacks were successful.

Overall the increasing cyber incidents in the Middle East illustrate how this new frontline is a concern to governments. 

DefenseOne:     Jerusalem Post:      Jerusalem Post       ZDNet:         Just Security:

You Might Also Read:

Iran's Cutting Edge Cyberwar Capabilities:

 

« Hacked ChatBooks Photo Data For Sale
Only A Quarter Of Employees Have Cyber Security Training »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Cybsecurity Foundation (CSF)

Cybsecurity Foundation (CSF)

Cybsecurity is a non-profit NGO, which aims to work on improvement of security levels in the Polish cyberspace.

tietoevry

tietoevry

Tietoevry creates digital advantage for businesses and society. We are a leading digital services and software company with local presence and global capabilities.

Intrusion

Intrusion

Intrusion provides IT professionals with the most robust tool set available for performing in-depth research and analysis of network traffic.

Cansure

Cansure

Cansure is a leading insurance provider in Canada offering a broad range of property & casualty insurance solutions including Cyber & Data Breach insurance.

Secure Recruitment

Secure Recruitment

Secure Recruitment is a specialist Executive Search business that focuses its efforts on attracting specific exceptional talent in Cyber Security.

SAP National Security Services (NS2)

SAP National Security Services (NS2)

SAP NS2 are dedicated to delivering the best of SAP innovation, from cloud to predictive analytics; machine learning to data fusion.

Network Intelligence

Network Intelligence

Network Intelligence delivers a comprehensive suite of AI-powered cybersecurity solutions built on the ADVISE framework.

Start Left® Security

Start Left® Security

Great security culture doesn't just happen; you ENGINEER it.

InfoSec4TC

InfoSec4TC

InfoSec4tc is an online Information Security Courses, Training, and Consultancy provider.

ResilientX

ResilientX

ResilientX is an All-In-One Security Testing Platform designed to help MSPs and SMBs to perform their security testing and assessments without having to outsource IT.

Afripol

Afripol

AFRIPOL was set up to strengthen cooperation between the police agencies of AU member states in the prevention and fight against organized transnational crime, terrorism, and cybercrime.

Scality

Scality

Scality storage unifies data management from edge to core to cloud. Our market-leading file and object storage software protects data on-premises and in hybrid and multi-cloud environments.

Zafran

Zafran

Zafran is a Risk & Mitigation Platform that defuses threat exploitation by mobilizing existing security tools.

Ark Technology Consultants

Ark Technology Consultants

Ark Technology Consultants is a unique IT Services Firm which blends technology solutions with consultative insight around governance and process management.

NOYB

NOYB

NOYB is a non-profit organization aiming to close the gap between privacy laws and the reality of corporate practice.

ArmorX AI

ArmorX AI

ArmorX AI (formerly Kapalya) operates an encryption management platform designed to encrypt all data in transit and at rest on mobile end-points, corporate servers, and cloud servers.