Iran In The Firing Line

In the Middle East there has been an increased role of cyber war and cyber security, much as the region is also at the forefront of experiments with new weapon systems.

Iran reported three cyber-attacks, within one week last December. At least one of the attacks was allegedly "state-sponsored." the governmant has claimed, saying that two of the these attacks in were repelled by the country's security shield, known as Digital Fortress or Dezhfa, which it is claimed has helped repel 33 million cyber attacks against the country in 2019

This month Iranian officials say that hackers damaged a small number of computers in a failed cyber-attack against the port of Bandar Abbas, the country's largest port in the Strait of Hormuz. 

Details about the cyber attack remain unknown, although recent cyber attacks have managed to damage a number of private systems at the Shahid Rajaei port near Bandar Abbas and the Strait of Hormuz, said Mohammad Rastad, Managing Director of the Ports and Maritime Organisation. 

Iran is currently in the process of developing a national Internet system, known as the National Information Network (NIN), in order to cut the country's dependency on international cyberspace. The network will also prevent Virtual Private Networks (VPNs) from helping Iranians bypass the Islamic Republic's censorship of the Internet, as data requests won't be routed outside the country. The plan was first announced in 2010 with an expected completion date in 2015. In May, the Supreme Council of the Cultural Revolution announced that the NIN is 80% complete.

The Intranet would allow the government to decide what content can be accessed by users, removing the need for absolute shutdowns like the one imposed during the protests.

Some Iranian newspapers warned the government against imposing such a decision on citizens, as things could easily spark out of control as they did after gasoline prices were raised in a sudden decision by the nation's leadership, according to an Iranian opposition group. A state-run daily called the announcement a "threatening message to the people," while another daily asked, "will the people and the private sector tolerate the Internet shutdown?"

This month, Israel's security cabinet met to discuss an alleged Iranian cyber attack on Israeli water and sewage facilities that took place in April. The attack did not cause substantial damage except for a few issues in local water systems, according to Israeli officials, but is still seen as a substantial escalation by the Iranians, especially since the target was civilian infrastructure.

Iran-linked hackers have targeted US-owned drug company Gilead Sciences Inc. in recent weeks as the firm scrambles to develop treatments for the Covid-19 virus. The hackers posed as journalists and sent emails to Gilead employees that were intended to trick them into sharing their passwords. It is not known whether any of the attempted attacks were successful.

Overall the increasing cyber incidents in the Middle East illustrate how this new frontline is a concern to governments. 

DefenseOne:     Jerusalem Post:      Jerusalem Post       ZDNet:         Just Security:

You Might Also Read:

Iran's Cutting Edge Cyberwar Capabilities:

 

« Hacked ChatBooks Photo Data For Sale
Only A Quarter Of Employees Have Cyber Security Training »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

RSA Security

RSA Security

RSA provide cybersecurity products for Threat Detection and Response, Identity and Access Management, Governance, Risk and Compliance, and Fraud Prevention.

Kirkland & Ellis

Kirkland & Ellis

Kirkland & Ellis LLP is an international law firm with offices in the USA, Europe and Asia. Practice areas include Data Security & Privacy.

Ionic Security

Ionic Security

Ionic provide a high-assurance data protection and control platform built on strong encryption, fine-grain control and contextual analytics.

Giesecke+Devrient (G+D)

Giesecke+Devrient (G+D)

Giesecke+Devrient develop security technologies in four major areas: enabling secure payment, providing trusted connectivity, safeguarding identities and protecting digital infrastructures.

Exatel

Exatel

Exatel is Poland’s leading provider of ICT security services.

Armorblox

Armorblox

Armorblox stops targeted email attacks such as 0-day credential phishing, payroll fraud, vendor fraud, and other threats that get past legacy security controls.

CybExer Technologies

CybExer Technologies

CybExer provide an on-premise, easily deployable solution for complex technical cyber security exercises based on experience in military grade ranges.

GlobalPass

GlobalPass

Covering 200+ countries with 78 000 databases, GlobalPass provides sophisticated facial biometrics verification and deep screening, delivering peace of mind to every client.

MPC Alliance

MPC Alliance

A consortium of developers and practitioners of multiparty computation (MPC), committed to accelerating market awareness and adoption of MPC to increase the security and privacy of online services.

Securosys

Securosys

Securosys is a technology company dedicated to securing data and communications. We develop, produce, and distribute hardware, software and services that protect and verify data and their transmission

CICRA Consultancies

CICRA Consultancies

Cicra Consultancies is a company that specializes in cyber security. Our major activities are guided by three main principles: Prevent, Investigate, Prosecute.

Zephyr Project

Zephyr Project

The Zephyr Project strives to deliver the best-in-class RTOS for connected resource-constrained devices, built to be secure and safe.

Mobileum

Mobileum

Mobileum is a leading provider of Telecom analytics for roaming, security and risk management and end-to-end domestic and roaming testing solutions.

Rocky Mountain Cybersecurity

Rocky Mountain Cybersecurity

Rocky Mountain Cybersecurity's mission is to provide value by dramatically improving the cybersecurity posture of our clients and business partners.

MedSec

MedSec

MedSec is the only company of its type focused solely on cybersecurity for hospitals and medical device manufacturers, offering both a cybersecurity software solution and consulting services.

Fusion Cyber

Fusion Cyber

Fusion Cyber educates students in Zero Trust Risk Management, Defense, and Cyber Offense that lead to taking industry-accepted cybersecurity certifications.