APT42 Archives

Nominations can be submitted for the 2025 CyberScoop 50 awards!

APT42

An Iranian hacking group has been observed using disguised social media personas to spread and share fake job recruitment websites, employment offers and other content lures to unsuspecting victims. (Credit: Manuel Augusto Moreno via Getty Images)

Iranian hackers using social media, job recruitment sites to lure Israeli spies

Mandiant says the primary motive for the operation appears to be helping the Iranian government identify Iranians who may cooperate with Israel.

Aug 28, 2024 By Derek B. Johnson

The recent flaw in WhatsApp does not mean encryption is a gimmick. (Jeso Carneiro/Flickr)

Meta deep-sixes WhatsApp accounts tied to Iranian hacking group

The tech giant believes it is another instance of Iranian hackers attempting to meddle in U.S. politics and the upcoming presidential election.

Aug 23, 2024 By Derek B. Johnson

An Iranian flag is carried around the Azadi (Freedom) monument tower during the annual rally commemorating Iran’s 1979 Islamic Revolution in Tehran on Feb. 11, 2024. (Photo by Majid Saeedi/Getty Images)

Iranian hackers impersonate journalists in social engineering campaign

Members of a notorious Iranian hacking crew are using false personas to steal credentials and access victim cloud environments, per a new Mandiant report.

May 1, 2024 By Derek B. Johnson

Researchers at the cybersecurity firm Proofpoint attributed a cyberattack on a “close affiliate” of former National Security Adviser John Bolton, seen here in Washington in August 2022, to an Iranian hacking group known as TA453. (Photo by Anna Moneymaker/Getty Images)

Iranian hacking group expands focus to US politicians, critical infrastructure, researchers find

The group known as TA453 has added "outlier" attacks to its portfolio over the past two years, seemingly in concert with Iranian hardliners.

Dec 14, 2022 By AJ Vicens