Cyberwarfare in Iran
   HOME

TheInfoList



OR:

Cyberwarfare is a part of
Iran Iran, officially the Islamic Republic of Iran, and also called Persia, is a country located in Western Asia. It is bordered by Iraq and Turkey to the west, by Azerbaijan and Armenia to the northwest, by the Caspian Sea and Turkmeni ...
's "soft war" military strategy. Being both a victim and wager of cyberwarfare, Iran is considered an emerging military power in the field. Since November 2010, an organization called "The Cyber Defense Command" ( fa, قرارگاه دفاع سایبری; ''Gharargah-e Defa-e Saiberi'') has been operating in Iran under the supervision of the country's "Passive Civil Defense Organization" ( fa, سازمان پدافند غیرعامل; ''Sazeman-e Padafand-e Gheyr-e Amel'') which is itself a subdivision of the Joint Staff of Iranian Armed Forces. According to a 2014 report by Institute for National Security Studies, Iran is "one of the most active players in the international cyber arena". In 2013, a
Revolutionary Guards The Islamic Revolutionary Guard Corps (IRGC; fa, سپاه پاسداران انقلاب اسلامی, Sepāh-e Pāsdārān-e Enghelāb-e Eslāmi, lit=Army of Guardians of the Islamic Revolution also Sepāh or Pasdaran for short) is a branch o ...
general stated that Iran has "the 4th biggest cyber power among the world's cyber armies." According to a 2021 report by a cyber-security company, "Iran is running two surveillance operations in cyber-space, targeting more than 1,000 dissidents".


NIN

Iranian cyber defense system - digital fortress part of
national information network The National Information Network (NIN) (Persian: شبکۀ ملی اطلاعات, ''Shabake-ye Melli-ye Ettelā'āt''), also known as National Internet in Iran and the Iranian intranet, is an ongoing project to develop a secure, stable infrastruc ...
(national internet) - is developed for thwarting and attacks and engage attackers. In November 2022, Iranian Majlis Islamic Consultative Assembly recommended a Passive Defence Incorporation.


Attacks against Iran

In June 2010, Iran was the victim of a
cyber-attack A cyberattack is any offensive maneuver that targets computer information systems, computer networks, infrastructures, or personal computer devices. An attacker is a person or process that attempts to access data, functions, or other restricted ...
when its nuclear facility in Natanz was infiltrated by the cyber-worm '
Stuxnet Stuxnet is a malicious computer worm first uncovered in 2010 and thought to have been in development since at least 2005. Stuxnet targets supervisory control and data acquisition (SCADA) systems and is believed to be responsible for causing subs ...
'. Reportedly a combined effort by the United States and Israel, Stuxnet destroyed perhaps over 1,000 nuclear centrifuges and, according to a ''Business Insider'' article, " etTehran's atomic programme back by at least two years." The worm spread beyond the plant to allegedly infect over 60,000 computers, but the government of Iran indicates it caused no significant damage. Iran crowdsourced solutions to the worm and is purportedly now better positioned in terms of cyber warfare technology. No government has claimed responsibility for the worm. The cyber-worm was also used against
North Korea North Korea, officially the Democratic People's Republic of Korea (DPRK), is a country in East Asia. It constitutes the northern half of the Korean Peninsula and shares borders with China and Russia to the north, at the Yalu (Amnok) and T ...
.


Events

* In October 2013, media reported Mojtaba Ahmadi, who served as commander of the "Cyber War Headquarters" was found dead wounded by bullets in
Karaj Karaj ( fa, کرج, ) is the capital of Alborz Province, Iran, and effectively a satellite city of Tehran. Although the county hosts a population around 1.97 million, as recorded in the 2016 census, most of the county is rugged mountain. The urb ...
. * November 2018: The Iranian telecommunication minister Mohammad-Javad Azari Jahromi accuses
Israel Israel (; he, יִשְׂרָאֵל, ; ar, إِسْرَائِيل, ), officially the State of Israel ( he, מְדִינַת יִשְׂרָאֵל, label=none, translit=Medīnat Yīsrāʾēl; ), is a country in Western Asia. It is situated ...
of a failed
cyberattack A cyberattack is any offensive maneuver that targets computer information systems, computer networks, infrastructures, or personal computer devices. An attacker is a person or process that attempts to access data, functions, or other restricte ...
on its telecommunications infrastructure, and vows to respond with legal action. *October 2021: An attack paralyzed gas stations across the country, preventing users from purchasing fuel using state-issued cards and digital billboards displayed antigovernment messages *In September, October and November 2022, Iranian state networks and emails came under attack by Anonymous and other hacking groups acting in solidarity with Iranian protestors.


Attacks by Iran

The
Iranian government The Government of the Islamic Republic of Iran ( fa, نظام جمهوری اسلامی ایران, Neẓām-e jomhūrī-e eslāmi-e Irān, known simply as ''Neẓām'' ( fa, نظام, lit=the system) among its supporters) is the ruling state a ...
has been accused by western analysts of its own cyber-attacks against the
United States The United States of America (U.S.A. or USA), commonly known as the United States (U.S. or US) or America, is a country primarily located in North America. It consists of 50 states, a federal district, five major unincorporated territori ...
,
Israel Israel (; he, יִשְׂרָאֵל, ; ar, إِسْرَائِيل, ), officially the State of Israel ( he, מְדִינַת יִשְׂרָאֵל, label=none, translit=Medīnat Yīsrāʾēl; ), is a country in Western Asia. It is situated ...
and
Persian Gulf The Persian Gulf ( fa, خلیج فارس, translit=xalij-e fârs, lit=Gulf of Fars, ), sometimes called the ( ar, اَلْخَلِيْجُ ٱلْعَرَبِيُّ, Al-Khalīj al-ˁArabī), is a mediterranean sea in Western Asia. The bod ...
Arab countries, but denied this, including specific allegations of 2012 involvement in hacking into American banks. The conflict between Iran and the United States has been called "history's first known cyber-war" by Michael Joseph Gross mid-2013.


Events

* August 2014: An
IDF IDF or idf may refer to: Defence forces * Irish Defence Forces * Israel Defense Forces *Iceland Defense Force, of the US Armed Forces, 1951-2006 * Indian Defence Force, a part-time force, 1917 Organizations * Israeli Diving Federation * Interac ...
official told press in that Iran has launched numerous significant attacks against Israel's
Internet The Internet (or internet) is the global system of interconnected computer networks that uses the Internet protocol suite (TCP/IP) to communicate between networks and devices. It is a '' network of networks'' that consists of private, pub ...
infrastructure. * 31 March 2015: There was a massive power outage for 12 hours in 44 of 81 provinces of Turkey, holding 40 million people.
Istanbul ) , postal_code_type = Postal code , postal_code = 34000 to 34990 , area_code = +90 212 (European side) +90 216 (Asian side) , registration_plate = 34 , blank_name_sec2 = GeoTLD , blank_i ...
and
Ankara Ankara ( , ; ), historically known as Ancyra and Angora, is the capital of Turkey. Located in the central part of Anatolia, the city has a population of 5.1 million in its urban center and over 5.7 million in Ankara Province, maki ...
were among the places suffering blackout. According to '' Observer.com'', Iranian hackers, possibly
Iranian Cyber Army The Iranian Cyber Army is an Iranian computer hacker group. It is thought to be connected to Iranian government, although it is not officially recognized as an entity by the government. It has pledged loyalty to Supreme Leader of Iran. According t ...
, were behind the power outage. * June 2017: The ''Daily Telegraph'' reported that intelligence officials concluded that Iran was responsible for a cyberattack on the
British Parliament The Parliament of the United Kingdom is the supreme legislative body of the United Kingdom, the Crown Dependencies and the British Overseas Territories. It meets at the Palace of Westminster, London. It alone possesses legislative suprem ...
lasting 12 hours that compromised around 90 email accounts of MPs. The motive for the attack is unknown but experts suggested that the Islamic Revolutionary Guard Corps could be using cyberwarfare to undermine the
Iran nuclear deal The Joint Comprehensive Plan of Action (JCPOA; fa, برنامه جامع اقدام مشترک , barnāmeye jāme'e eqdāme moshtarak (, ''BARJAM'')), commonly known as the Iran nuclear deal or Iran deal, is an agreement on the Iranian nuclear ...
. * January 2022: The website of
Israel Israel (; he, יִשְׂרָאֵל, ; ar, إِسْرَائِيل, ), officially the State of Israel ( he, מְדִינַת יִשְׂרָאֵל, label=none, translit=Medīnat Yīsrāʾēl; ), is a country in Western Asia. It is situated ...
's '' Jerusalem Post'' newspaper and the Twitter account of Maariv newspaper are hacked by suspected
Iran Iran, officially the Islamic Republic of Iran, and also called Persia, is a country located in Western Asia. It is bordered by Iraq and Turkey to the west, by Azerbaijan and Armenia to the northwest, by the Caspian Sea and Turkmeni ...
ian hackers. The website's content was replaced with a threat to target the
Shimon Peres Negev Nuclear Research Center The Shimon Peres Negev Nuclear Research Center ( he, קריה למחקר גרעיני – נגב ע"ש שמעון פרס, formerly the ''Negev Nuclear Research Center'', unofficially sometimes referred to as the ''Dimona reactor'') is an Israe ...
, and an apparent reference to
Qasem Soleimani Qasem Soleimani ( fa, قاسم سلیمانی, ; 11 March 19573January 2020) was an Iranian military officer who served in the Islamic Revolutionary Guard Corps (IRGC). From 1998 until his assassination in 2020, he was the commander of the Qu ...
who was assassinated exactly two years earlier in
Baghdad Baghdad (; ar, بَغْدَاد , ) is the capital of Iraq and the second-largest city in the Arab world after Cairo. It is located on the Tigris near the ruins of the ancient city of Babylon and the Sassanid Persian capital of Ctesiphon. I ...
,
Iraq Iraq,; ku, عێراق, translit=Êraq officially the Republic of Iraq, '; ku, کۆماری عێراق, translit=Komarî Êraq is a country in Western Asia. It is bordered by Turkey to the north, Iran to the east, the Persian Gulf and K ...
. * March 2022: Large-scale cyberattacks were launched against multiple Israeli government websites, allegedly by Iran as retaliation for failed Mossad operations, though neither the attack attribution nor the purported Mossad operations could be confirmed as of March 2022. The National Cyber Directorate declared a state of emergency as a result of the attacks and unnamed defense sources told media outlets it was possibly the largest-ever cyberattack against Israel. * November 2022: Iranian hackers attacked Albanian networks. * November seventeen American networks system were turned into mining crypto because of existing undefended vulnerability.https://amp.cnn.com/cnn/2022/11/16/politics/iran-hackers-us-government-network/index.html


Suspended Iranian accounts

On May 5, 2020, Reuters reported, quoting a monthly Facebook report, that Iranian state-run media had targeted hundreds of fake social media accounts to covertly spread pro-Iranian messaging, online since at least 2011, for secretly broadcasting online promotional messages in favor of Iran in order targeting voters in countries including Britain and the United States. Accounts suspended for coordinated inauthentic behavior, which removed eight networks in recent weeks, including one with links to the Islamic Republic of Iran Broadcasting.


See also

* Ashiyane *
List of cyber warfare forces Many countries around the world maintain military units that are specifically trained to operate in a cyberwarfare environment. In several cases this units acts also as the national computer emergency response team for civilian cybersecurity threa ...
*
Iranian Cyber Army The Iranian Cyber Army is an Iranian computer hacker group. It is thought to be connected to Iranian government, although it is not officially recognized as an entity by the government. It has pledged loyalty to Supreme Leader of Iran. According t ...
*
Iran Cyber Police The Iranian Cyber Police ( fa, پلیس فضای تولید و تبادل اطلاعات ایران, ''Pelis-e Fezai-ye Tulid-e vâ Tebadâl-e Atlâ'at-e Iran'', lit. ''The Police for the Sphere of the Production and Exchange of Information'', als ...
*
Communications in Iran Iran's telecommunications industry is almost entirely state-owned, dominated by the Telecommunication Company of Iran (TCI). Fixed-line penetration in 2004 was relatively well-developed by regional standards, standing at 22 lines per 100 people, ...
* Monica Witt *
Hybrid warfare against Iran Hybrid may refer to: Science * Hybrid (biology), an offspring resulting from cross-breeding ** Hybrid grape, grape varieties produced by cross-breeding two ''Vitis'' species ** Hybridity, the property of a hybrid plant which is a union of two dif ...
* Iran Mission Center ;Alleged operations and malware against Iran *
Operation Olympic Games Operation Olympic Games was a covert and still unacknowledged campaign of sabotage by means of cyber disruption, directed at Iranian nuclear facilities likely by the United States and Israel. As reported, it is one of the first known uses of o ...
*
Stuxnet Stuxnet is a malicious computer worm first uncovered in 2010 and thought to have been in development since at least 2005. Stuxnet targets supervisory control and data acquisition (SCADA) systems and is believed to be responsible for causing subs ...
*
Flame A flame (from Latin '' flamma'') is the visible, gaseous part of a fire. It is caused by a highly exothermic chemical reaction taking place in a thin zone. When flames are hot enough to have ionized gaseous components of sufficient density they ...
*
Duqu Duqu is a collection of computer malware discovered on 1 September 2011, thought by Kaspersky Labs to be related to the Stuxnet worm and to have been created by Unit 8200. Duqu has exploited Microsoft Windows's zero-day vulnerability. The Lab ...
* Stars virus ;Alleged operations and malware by Iran *
Foreign interference in the 2020 United States elections Russian interference in the 2020 United States elections was a matter of concern at the highest level of national security within the United States government, in addition to the computer and social media industries. In 2020, the RAND Corpora ...
*
Mahdi The Mahdi ( ar, ٱلْمَهْدِيّ, al-Mahdī, lit=the Guided) is a messianic figure in Islamic eschatology who is believed to appear at the end of times to rid the world of evil and injustice. He is said to be a descendant of Muhammad w ...
*
Shamoon Shamoon ( fa, شمعون), also known as W32.DistTrack, is a modular computer virus that was discovered in 2012, targeting then-recent 32-bit NT kernel versions of Microsoft Windows. The virus was notable due to the destructive nature of the atta ...
* Operation Ababil * Operation Newscaster * Operation Cleaver *
Yemen Cyber Army The Yemen Cyber Army ( Y.C.A ) is a pro Yemeni hacker group that has claimed responsibility for the defacement of the London based pro- Saudi Al-Hayat website in April 2015 as well as the exfiltration of data from the Saudi Arabia’s Ministry of ...
*
Syrian Electronic Army The Syrian Electronic Army (SEA; ar, الجيش السوري الإلكتروني) is a group of computer hackers which first surfaced online in 2011 to support the government of Syrian President Bashar al-Assad. Using spamming, website defac ...


References


External links


Iranians Charged with Hacking IS Financial sector
(
FBI The Federal Bureau of Investigation (FBI) is the domestic intelligence and security service of the United States and its principal federal law enforcement agency. Operating under the jurisdiction of the United States Department of Justice, t ...
) {{Portal bar, Iran, War, Internet Cyberwarfare in Iran