Iranian Hackers Using Brute Force on Critical Infrastructure

Advisory Warns Iranian Threat Actors Use 'Push Bombing' to Target Critical Sectors Chris Riotta (@chrisriotta) • October 16, 2024

Iranian cyber actors are increasingly using brute force techniques - such as password spraying and multifactor authentication "push bombing" - to attack global critical infrastructure sectors, according to a joint advisory on Wednesday.

See Also: Cybersecurity Awareness Engagement Toolkit: Elevate Your Security Culture

The U.S. Cybersecurity and Infrastructure Security Agency published a cybersecurity advisory with the FBI, National Security Agency and cyber authorities in Canada and Australia warning of the growing threat posed by Iranian state-sponsored cyber actors. The advisory warned that Iranian threat actors have been targeting healthcare, government, IT, engineering and energy sectors with brute force and other techniques to steal credentials and gather information for deeper system access.

CISA assessed that Iranian ...