Iranian hackers targeted former administration officials and Iran hawks in phishing schemes similar to the one used to breach Donald Trump’s campaign. The hackers sent emails containing malicious code disguised as a manuscript for review, seeking to gain access to targets’ computers. The FBI was notified of the hacking attempts, which experts believe were carried out by a group affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC).
In addition to the targeted hacking attempts on US government officials and Iran critics, the hackers have also targeted former Biden administration senior diplomats. In one instance, a diplomat received an email from someone posing as a scholar at a Washington, DC think tank, requesting a discussion on the Israel-Palestinian situation. These phishing schemes aimed to gain access to email accounts of officials in order to potentially leak documents or gather intelligence.
US intelligence agencies are closely monitoring Iran’s cyber activities, particularly as the country has been implicated in cyber intrusions and disinformation campaigns targeting the 2024 presidential election. Iran’s use of hack-and-leak tactics, similar to those employed by Russia in the 2016 election, is a cause for concern among officials due to the potential to sow discord and manipulate public opinion.
Iran’s hacking program, while not as advanced as other countries such as China or Russia, has grown in sophistication over the years. With a cadre of skilled cyber operatives, Iran has targeted critical infrastructure in the US and Middle East. The hackers have shown a keen interest in accessing the email correspondence of journalists, think tank analysts, and former US officials to gather valuable intelligence and potentially influence public discourse.
The IRGC-linked hackers have expanded their activities beyond traditional espionage to collect data that could be used for kidnappings and assassination plots. Iranian hackers have targeted individuals who pose a threat to the regime, such as opposition activists and journalists. The hacking attempts are part of broader efforts by Iran to monitor and intimidate its perceived enemies, both domestically and abroad.
As the US heads into another election cycle, the FBI is investigating Iranian cyber activities, including a hack of the Trump campaign and an alleged plot to kill a candidate. US officials are concerned about Iran’s attempts to shape the outcome of elections and influence national security interests. Iran’s cyber operations have evolved from espionage to collecting actionable intelligence on individuals and organizations of interest to the regime.
