720-891-1663

Return to the list of client alerts

 

Unrest in Iran Increases Likelihood of Cyber Attacks Against U.S. Interests

The Feds are doing everything other than climbing to the top of the Statue of Liberty and yelling at the top of their lungs that the activities currently going on in Iran dramatically increases the probability of cyber attacks against U.S. assets by groups friendly to Iran.

This could easily draw out for 6-12 months, so this is not the kind of thing where you can breathe easily if nothing happens this week.

I have already sent out private emails with related alerts today – ones that cannot be posted – and posted one on the reference page that can be posted.

Here is what one analyst is saying:

“At this point, a cyberattack should be expected,” said Jon Bateman, a former Defense Intelligence Agency analyst on Iran’s cyber capabilities and now a cybersecurity fellow for the Carnegie Endowment for International Peace.

Years ago Iran launched cyber attacks against a number of critical U.S. assets and one can only assume that they have gotten better at it over the years.  They tried to wipe out all of the IT infrastructure of the Sands entertainment empire after owner Sheldon Adelson suggested we drop a nuke on Iran.  Only quick action averted that.

The did destroy 30,000 computers belonging to Saudi Aramco a few years ago after the two countries got into a spat.

They could attack U.S. assets abroad if they are deemed softer targets.

And, there could be collateral damage (meaning you and me).  They might consider that a plus.

The DHS Cybersecurity and Infrastructure Security (CISA) Agency has issued a public alert reminding people of what Iran has done in the past and what you should do to batten down the hatches.

I also have another report which I am not allowed to share (if you are an Infragard member contact me directly and I can advise you on how you might be able to get it) which suggests that with the U.S. tightening sanctions, attacks on financial institutions and Business Email Compromise attacks could be a great revenue generator for Iran.

Ransomware attacks and compromises of IoT devices to launch DDoS attacks are also possible.

In addition, attacks on third parties (Vendor Cyber Risk Management) might be a way to attack you, rather than a frontal attack.

Bottom line here, we don’t know what they are thinking, but this is likely considered a low risk (in their minds) way to attack us.

Also, this is an easy way for lone wolves (independent actors who are sympathetic to their cause) to score points AND also a way for non-affiliateds to create confusion and stir up the general public.

This is a longer term problem that many.  If we can help, please contact us.