A series of cyberattacks targeting local water systems in the US state of Minnesota has raised concerns over a possible Iran-linked hacking operation, according to US media reports. Around 30 water systems were targeted in attacks carried out on Sunday (Jul 26) and Monday (Jul 27), with investigators examining links to the CyberAv3ngers group, a cybercriminal group that US officials have previously accused of being backed by Tehran.The attack temporarily disrupted water services in Braham, a small town in the Minneapolis metropolitan area. Officials restored operations after the disruption lasted for nearly two hours, according to reports.Cybersecurity firm Tenable said the techniques used in the incident showed similarities with methods associated with CyberAv3ngers. The group has previously targeted industrial control systems, including critical infrastructure networks.While US investigators suspect Iranian involvement, authorities have not yet officially attributed the attack to Tehran. The FBI has not publicly commented on the incident.The cyberattack comes days after the US Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about potential threats from Iran-aligned groups targeting internet-connected control systems used in critical infrastructure across the country.Also read | <a href="https://www.wionews.com/world/australia-launches-legal-action-against-telegram-for-failing-to-remove-terrorism-material-1785410124089">Australia launches legal action against Telegram for failing to remove ‘terrorism material’</a>The warning highlighted the growing risk of cyber operations aimed at disrupting essential services, including water, energy and other public utilities.CyberAv3ngers has been linked by US officials to Iran’s Islamic Revolutionary Guard Corps (IRGC), although Tehran has repeatedly denied allegations of directing cyberattacks against foreign targets.The latest incident adds to a growing list of cyber operations blamed on Iranian-linked groups. In March, the Handala Hack group claimed responsibility for attacks targeting US medical equipment manufacturer Stryker and digital payments company Verifone.Stryker confirmed it had faced a cyber incident, while Verifone rejected claims that it had been targeted.The Handala group said its actions were retaliation for a February strike on an elementary school in Minab, southern Iran, during the US-Israeli offensive against Iran. A US military investigation later found that the strike may have occurred due to incorrect coordinates used while targeting a nearby military facility.The Minnesota attacks have renewed concerns over the vulnerability of US infrastructure to politically motivated cyber campaigns. &nbsp;

Around 30 Minnesota water systems were targeted in cyberattacks suspected to be linked to Iran-backed CyberAv3ngers, raising fresh concerns over threats to US critical infrastructure.

A series of cyberattacks targeting local water systems in the US state of Minnesota has raised concerns over a possible Iran-linked hacking operation, according to US media reports. Around 30 water systems were targeted in attacks carried out on Sunday (Jul 26) and Monday (Jul 27), with investigators examining links to the CyberAv3ngers group, a cybercriminal group that US officials have previously accused of being backed by Tehran. The attack temporarily disrupted water services in Braham, a small town in the Minneapolis metropolitan area. Officials restored operations after the disruption lasted for nearly two hours, according to reports. Cybersecurity firm Tenable said the techniques used in the incident showed similarities with methods associated with CyberAv3ngers. The group has previously targeted industrial control systems, including critical infrastructure networks. While US investigators suspect Iranian involvement, authorities have not yet officially attributed the attack to Tehran. The FBI has not publicly commented on the incident. The cyberattack comes days after the US Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about potential threats from Iran-aligned groups targeting internet-connected control systems used in critical infrastructure across the country. Also read | Australia launches legal action against Telegram for failing to remove ‘terrorism material’ The warning highlighted the growing risk of cyber operations aimed at disrupting essential services, including water, energy and other public utilities. CyberAv3ngers has been linked by US officials to Iran’s Islamic Revolutionary Guard Corps (IRGC), although Tehran has repeatedly denied allegations of directing cyberattacks against foreign targets. The latest incident adds to a growing list of cyber operations blamed on Iranian-linked groups. In March, the Handala Hack group claimed responsibility for attacks targeting US medical equipment manufacturer Stryker and digital payments company Verifone. Stryker confirmed it had faced a cyber incident, while Verifone rejected claims that it had been targeted. The Handala group said its actions were retaliation for a February strike on an elementary school in Minab, southern Iran, during the US-Israeli offensive against Iran. A US military investigation later found that the strike may have occurred due to incorrect coordinates used while targeting a nearby military facility. The Minnesota attacks have renewed concerns over the vulnerability of US infrastructure to politically motivated cyber campaigns.

Around 30 Minnesota water systems were targeted in cyberattacks suspected to be linked to Iran-backed CyberAv3ngers, raising fresh concerns over threats to US critical infrastructure.

Iranian hackers behind cyberattack on Minnesota water systems? What we know

A major cyberattack on the Los Angeles County Metropolitan Transportation Authority (LACMTA) has been linked to Iranian hackers after Israeli cybersecurity researchers said at least 700 gigabytes of sensitive data were stolen from the transit system’s network. The breach, first detected in March, forced parts of Los Angeles’ public transport network offline and raised fresh concerns over escalating cyber warfare linked to tensions in the Middle East.&nbsp;Quoting the Tel Aviv-based cybersecurity firm Gambit Security, Reuters reported that the stolen material included emails, backups and internal files that were later found inadvertently exposed online. The company said digital forensic evidence tied the servers involved to a known Iranian-linked hacking operation.<h2>Israeli Researchers Point To Iranian Group</h2>In a report published on Tuesday, Gambit Security said the attack was linked to a pro-Iran hacking outfit called “Ababil of Minab”. Cybersecurity analysts have long suspected the group maintained ties to Tehran, although Iranian authorities have not publicly commented on the allegations.&nbsp;ALSO READ: <a href="https://www.wionews.com/world/what-are-the-abraham-accords-the-countries-that-joined-those-that-refused-and-why-they-matter-today-1779792559008">What are Abraham Accords? The countries that joined, those that refused and why they matter today</a>&nbsp;According to Reuters, Eyal Sela, Gambit’s director of threat intelligence, said a connection between the group and the Iranian state “has been a working assumption”. He added: “What our research adds is the forensic evidence to support it.” The group reportedly surfaced online shortly after the attack and claimed responsibility for wiping large volumes of transit data in what it described as a destructive cyber operation.<h2>What Was Affected During The Breach</h2>Although LACMTA officials said train and bus services continued operating, the breach disrupted several digital systems. Local reports said arrival screens were disabled in some locations and passengers temporarily could not reload transit fare cards. The transit authority said it was working with law enforcement agencies and cybersecurity experts to restore systems. “Attribution is part of the investigation and we will not speculate,” officials said in an earlier statement. The FBI confirmed it was “coordinating with partners in response”.&nbsp;ALSO READ: <a href="https://www.wionews.com/photos/will-iran-war-finally-end-what-we-know-and-don-t-know-about-fragile-us-iran-deal-still-facing-key-disputes-1779788417971">Will Iran war finally end? What we know and don’t know about fragile US-Iran deal still facing key disputes</a>&nbsp;Researchers say the Los Angeles attack may form part of a broader campaign of cyber operations allegedly linked to Iranian groups since the escalation of conflict between Iran, the United States and Israel earlier this year. Ababil has also claimed responsibility for attacks targeting South Florida’s Tri-Rail commuter network, vehicle-tracking company Vyncs and Saudi infrastructure firm Unimac. Gambit researchers further alleged the hackers targeted organisations in Israel and Turkey.<h2>Growing Concerns Over Infrastructure Security</h2>The incident has renewed scrutiny over the vulnerability of transport and public infrastructure systems to politically motivated cyberattacks. Experts quoted by Reuters warn that transit networks, fuel systems and communications platforms are increasingly becoming targets during geopolitical crises. Gambit Security said it had alerted relevant authorities after discovering the exposed data online. Meanwhile, US cybersecurity agencies continue investigating whether the breach forms part of a coordinated state-backed campaign targeting critical infrastructure across multiple countries.

Gambit Security said digital forensic evidence tied the servers involved to a known Iranian-linked hacking operation. In a report published on Tuesday,  the company claimed that the attack was linked to a pro-Iran hacking outfit called “Ababil of Minab”. 

A major cyberattack on the Los Angeles County Metropolitan Transportation Authority (LACMTA) has been linked to Iranian hackers after Israeli cybersecurity researchers said at least 700 gigabytes of sensitive data were stolen from the transit system’s network. The breach, first detected in March, forced parts of Los Angeles’ public transport network offline and raised fresh concerns over escalating cyber warfare linked to tensions in the Middle East. Quoting the Tel Aviv-based cybersecurity firm Gambit Security, Reuters reported that the stolen material included emails, backups and internal files that were later found inadvertently exposed online. The company said digital forensic evidence tied the servers involved to a known Iranian-linked hacking operation. Israeli Researchers Point To Iranian Group In a report published on Tuesday, Gambit Security said the attack was linked to a pro-Iran hacking outfit called “Ababil of Minab”. Cybersecurity analysts have long suspected the group maintained ties to Tehran, although Iranian authorities have not publicly commented on the allegations. ALSO READ: What are Abraham Accords? The countries that joined, those that refused and why they matter today According to Reuters, Eyal Sela, Gambit’s director of threat intelligence, said a connection between the group and the Iranian state “has been a working assumption”. He added: “What our research adds is the forensic evidence to support it.” The group reportedly surfaced online shortly after the attack and claimed responsibility for wiping large volumes of transit data in what it described as a destructive cyber operation. What Was Affected During The Breach Although LACMTA officials said train and bus services continued operating, the breach disrupted several digital systems. Local reports said arrival screens were disabled in some locations and passengers temporarily could not reload transit fare cards. The transit authority said it was working with law enforcement agencies and cybersecurity experts to restore systems. “Attribution is part of the investigation and we will not speculate,” officials said in an earlier statement. The FBI confirmed it was “coordinating with partners in response”. ALSO READ: Will Iran war finally end? What we know and don’t know about fragile US-Iran deal still facing key disputes Researchers say the Los Angeles attack may form part of a broader campaign of cyber operations allegedly linked to Iranian groups since the escalation of conflict between Iran, the United States and Israel earlier this year. Ababil has also claimed responsibility for attacks targeting South Florida’s Tri-Rail commuter network, vehicle-tracking company Vyncs and Saudi infrastructure firm Unimac. Gambit researchers further alleged the hackers targeted organisations in Israel and Turkey. Growing Concerns Over Infrastructure Security The incident has renewed scrutiny over the vulnerability of transport and public infrastructure systems to politically motivated cyberattacks. Experts quoted by Reuters warn that transit networks, fuel systems and communications platforms are increasingly becoming targets during geopolitical crises. Gambit Security said it had alerted relevant authorities after discovering the exposed data online. Meanwhile, US cybersecurity agencies continue investigating whether the breach forms part of a coordinated state-backed campaign targeting critical infrastructure across multiple countries.

Gambit Security said digital forensic evidence tied the servers involved to a known Iranian-linked hacking operation. In a report published on Tuesday, &nbsp;the company claimed that the attack was linked to a pro-Iran hacking outfit called “Ababil of Minab”.&nbsp;

700GB data stolen! Israeli Researchers blame Iranian hackers for Los Angeles transit system breach

The US dominates cyber warfare with billions in funding and elite tech, but Iran’s destructive, low-cost guerrilla tactics make it a dangerous asymmetric threat.

Who is more advanced in cyber warfare: US cyber units vs Iranian hackers?

A hacker organisation from Iran that was targeting Israeli vacation booking websites last month released the personal information of nearly 300,000 Israelis. Last month, the organisation known as Sharp Boys claimed to have acquired information such as ID numbers, addresses, credit card details, and more from Israeli travel websites.

Over 20 travel-related websites, including hotel4u.co.il, hotels.co.il, isrotel.com, minihotel.co.il, trivago.co.il, and danhotels.com, were compromised.

Several personal requests by Israeli consumers to cancel scheduled holidays due to various health conditions were reportedly among the information that was released.

"You are under our supervision no matter where you go, including on your travels. Keep our name in mind, "in a picture they shared on their Telegram channel, the Sharp Boys stated.

According to N12, Israel's Privacy Protection Authority stated it contacted the website operator after the theft to draw attention to flaws in data protection. The majority of the compromised Israeli websites are run by Gol Tours, which is owned by the operator.

Additionally, the authorities claimed that the operator ignored their request for him to update his cyber security. The Privacy Protection Authority claims that the reason for his denial was the prohibitive expense.

The proprietor of Gol Tours denied the claims made against him, saying he never refused to update his cyber security. Furthermore, he claimed that his business does not maintain credit card details and that the hackers "just grabbed names and phone numbers" from his website.

Inspectors from the Privacy Protection Authority are said to have taken the operator's servers after receiving a court order, effectively stopping all of his business's operations.

Sharp Boys' assertions

Sharp Boys uploaded a spreadsheet that it claimed held the personal data of 120,000 users and claimed to have taken control of the websites' backend administration.

The gang asserted earlier in the month that it had also compromised a number of other Israeli travel websites and stolen customer personal data from those websites.

Later, Sharp Boys released a spreadsheet that it claimed contained the personal data and credit card details of 100,000 people. 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

A hacker organisation from Iran that was targeting Israeli vacation booking websites last month released the personal information of nearly 300,000 Israelis. Last month, the organisation known as Sharp Boys claimed to have acquired information such as ID numbers, addresses, credit card details, and more from Israeli travel websites.

A hacker organisation from Iran that was targeting Israeli vacation booking websites last month released the personal information of nearly 300,000 Israelis. Last month, the organisation known as Sharp Boys claimed to have acquired information such as ID numbers, addresses, credit card details, and more from Israeli travel websites. Over 20 travel-related websites, including hotel4u.co.il, hotels.co.il, isrotel.com, minihotel.co.il, trivago.co.il, and danhotels.com, were compromised. Several personal requests by Israeli consumers to cancel scheduled holidays due to various health conditions were reportedly among the information that was released. "You are under our supervision no matter where you go, including on your travels. Keep our name in mind, "in a picture they shared on their Telegram channel, the Sharp Boys stated. According to N12, Israel's Privacy Protection Authority stated it contacted the website operator after the theft to draw attention to flaws in data protection. The majority of the compromised Israeli websites are run by Gol Tours, which is owned by the operator. Additionally, the authorities claimed that the operator ignored their request for him to update his cyber security. The Privacy Protection Authority claims that the reason for his denial was the prohibitive expense. The proprietor of Gol Tours denied the claims made against him, saying he never refused to update his cyber security. Furthermore, he claimed that his business does not maintain credit card details and that the hackers "just grabbed names and phone numbers" from his website. Inspectors from the Privacy Protection Authority are said to have taken the operator's servers after receiving a court order, effectively stopping all of his business's operations. Sharp Boys' assertions Sharp Boys uploaded a spreadsheet that it claimed held the personal data of 120,000 users and claimed to have taken control of the websites' backend administration. The gang asserted earlier in the month that it had also compromised a number of other Israeli travel websites and stolen customer personal data from those websites. Later, Sharp Boys released a spreadsheet that it claimed contained the personal data and credit card details of 100,000 people. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Iranian hackers leak data of over 300,000 Israelis from tourism sites

State-backed hackers from China and Iran have targeted staffers working on the US&nbsp;presidential campaign of Democratic candidate Joe Biden and US President Donald respectively according to&nbsp;a senior Google security official.

The announcement, made on Twitter by the head of Google's Threat Analysis Group, Shane Huntley, is the latest indication of the digital spying routinely aimed at top politicians of all stripes.

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
Recently TAG saw China APT group targeting Biden campaign staff &amp; Iran APT targeting Trump campaign staff with phishing. No sign of compromise. We sent users our govt attack warning and we referred to fed law enforcement. <a href="https://t.co/ozlRL4SwhG">https://t.co/ozlRL4SwhG</a>
— Shane Huntley (@ShaneHuntley) <a href="https://twitter.com/ShaneHuntley/status/1268589219842109440?ref_src=twsrc%5Etfw">June 4, 2020</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

Huntley said there was "no sign of compromise" of either campaign.

Also read:&nbsp;<a href="https://www.wionews.com/world/donald-trumps-approval-rating-dips-currently-trails-behind-biden-polls-298359">Donald Trump's approval rating dips, currently trails behind Biden: Polls</a>

Iranian attempts to break into Trump campaign officials' emails have been documented before. Last year, Microsoft Corp announced that a group often nicknamed Charming Kitten had tried to break into email accounts belonging to an unnamed US&nbsp;presidential campaign that sources identified as Trump's.

Earlier this year, the threat intelligence company Area1 said that Russian hackers had targeted companies tied to a Ukrainian gas firm where Biden's son once served on the board.

Google declined to offer details beyond Huntley's tweets, but the unusually public attribution is a sign of how sensitive Americans have become to digital espionage efforts aimed at political campaigns.

State-backed hackers from China and Iran have targeted staffers working on the US presidential campaign of Democratic candidate Joe Biden and US President Donald respectively according to a senior Google security official.

State-backed hackers from China and Iran have targeted staffers working on the US presidential campaign of Democratic candidate Joe Biden and US President Donald respectively according to a senior Google security official. The announcement, made on Twitter by the head of Google's Threat Analysis Group, Shane Huntley, is the latest indication of the digital spying routinely aimed at top politicians of all stripes. Recently TAG saw China APT group targeting Biden campaign staff & Iran APT targeting Trump campaign staff with phishing. No sign of compromise. We sent users our govt attack warning and we referred to fed law enforcement. https://t.co/ozlRL4SwhG — Shane Huntley (@ShaneHuntley) June 4, 2020 × Huntley said there was "no sign of compromise" of either campaign. Also read: Donald Trump's approval rating dips, currently trails behind Biden: Polls Iranian attempts to break into Trump campaign officials' emails have been documented before. Last year, Microsoft Corp announced that a group often nicknamed Charming Kitten had tried to break into email accounts belonging to an unnamed US presidential campaign that sources identified as Trump's. Earlier this year, the threat intelligence company Area1 said that Russian hackers had targeted companies tied to a Ukrainian gas firm where Biden's son once served on the board. Google declined to offer details beyond Huntley's tweets, but the unusually public attribution is a sign of how sensitive Americans have become to digital espionage efforts aimed at political campaigns.

Biden and Trump's campaigns targeted by Chinese and Iranian hackers: Google

iranian-hackers

Iranian Hackers, News on Iranian Hackers, stories on Iranian Hackers, articles on Iranian Hackers, Iranian Hackers stories at Wion, Iranian Hackers news, Iranian Hackers latest news

iranian hackers

Iranian hackers behind cyberattack on Minnesota water systems? What we know

Israeli Researchers blame Iranian hackers for Los Angeles transit system breach

Who is more advanced in cyber warfare: US cyber units vs Iranian hackers?

Iranian hackers leak data of over 300,000 Israelis from tourism sites

Biden and Trump's campaigns targeted by Chinese and Iranian hackers: Google