Iran
Latest
Canada arrests Huawei CFO for violating Iran sanctions (updated)
Huawei's ongoing US troubles just got much worse. Canadian law enforcement has confirmed to the Globe and Mail that it arrested Huawei CFO Wanzhou Meng at the request of the US over claims she violated sanctions against Iran. Most details are under wraps due to a publication ban at Meng's request, but she was arrested on December 1st in Vancouver and will have a bail hearing on December 7th.
US charges Iranian hackers over $30 million ransomware spree
The US is attempting to hold the creators of the infamous SamSam ransomware to account. A federal grand jury has revealed indictments against two Iranian men, Mohammad Mansouri and Faramarz Savandi, for allegedly authoring and wielding SamSam to extort money from a wide range of North American targets, including multiple hospitals, health care companies, state agencies and the city of Atlanta. They've successfully collected $6 million in ransoms so far, according to the Justice Department, and have created over $30 million in losses.
Facebook removed 82 fake accounts and Pages linked to Iran
Facebook has taken down dozens of additional Pages originating from Iran that it says were engaged in inauthentic behavior. Posting about political topics such as race relations, immigration and the US president, these Pages and accounts -- 82 in total -- posed as US, or in some cases UK, citizens. Facebook first discovered the Pages' activity a week ago, and its war room staff then investigated and ultimately removed the Pages in question. The company says it has shared information about these Pages and their activity with US and UK government officials, US law enforcement, Congress, other tech companies and the Atlantic Council's Digital Forensic Research Lab.
Facebook, Twitter reportedly haven’t seen any China election meddling
Though President Trump and Vice President Pence have repeated claims that China is actively trying to meddle in the upcoming US midterm elections, officials at Facebook and Twitter have now said they haven't come across any such attempts. Anonymous press representatives at the two social media companies told Bloomberg that while disinformation campaigns have been uncovered and linked to Russia and Iran, none have been linked to China.
Twitter publishes over 10 million tweets linked to election meddling
Twitter has previously cracked down on accounts linked to election interference campaigns and provided snippets of their tweets, but now it's flinging the gates wide open. The social network has published data sets with over 10 million tweets from 4,611 accounts behind "inauthentic" activity, 3,841 of which are from the Russia-linked Internet Research Agency with the remaining 770 possibly tied to Iran. The library also includes over 2 million GIFs, videos and recorded Periscope livestreams. As for why Twitter is doing this? Simply speaking, it can't study this data all by itself.
Reddit moderators spotted Iranian fake news campaign months ago
Earlier this week, Facebook, Twitter and Google announced they had pulled a number of accounts linked to a misinformation campaign based out of Iran. Facebook took down 652 pages believed to be connected to the campaign while Twitter suspended 284 accounts. Google also removed a number of YouTube channels, Google+ accounts and Blogger blogs. But NBC News reports today that a handful of Reddit moderators spotted this misinformation effort some time ago and that their reports to the website were ignored.
Google removes accounts tied to Iran-led misinformation campaign
Google shared an update today regarding its efforts to combat state-sponsored phishing attacks and to remove accounts associated with an influence operation linked to Iran. The company said that in recent months, it has detected and blocked state-sponsored groups from targeting political campaigns, journalists, activists and academics with phishing attempts. Along with notifying law enforcement when these sorts of attacks are discovered, Google also notifies affected users, and it issued a series of alerts to Gmail users earlier this week over suspicious emails. It said the emails originated from a wide range of countries. You can read more about that specific round of notifications here.
Facebook pulls hundreds of 'inauthentic' pages linked to Iran and Russia
Once again, Facebook is notifying the media that it has mass-removed accounts exhibiting "coordinated inauthentic behavior on Facebook and Instagram." This time around, Mark Zuckerberg said the cull caught up 652 pages that it says were linked to a campaign originating in Iran, as well as an unspecified number of accounts linked to Russian military intelligence services. Like Microsoft's announcement last night and Facebook's last notice in July, these changes are part of a push for security around elections happening in 2018, including the just-concluded events in Mexico, and the US midterms in November. While Facebook attributed the moves announced today to four separate investigations, it acknowledged that security company FireEye tipped it off to a network of sites starting with "Liberty Front Press." Facebook connected the page's backers to Iranian state media, saying that some of the accounts were created as early as 2013, while targeting viewers in the Middle East, UK, US and Latin America. One of the pages had 155,000 followers, and one of its Instagram accounts notched 48,000 followers. While some of the pages found pretended to be news and other organizations, a second group of "inauthentic" news pages showed evidence of attempts to hack accounts and spread malware.
In nuclear politics, one size doesn't fit all
No one wants to use nuclear weapons. Even President Harry S. Truman, the only leader in history to actually order and carry out a nuclear strike, was hesitant to use the United States' atomic arsenal after witnessing the power of the bombs first-hand. On July 16th, 1945, the US successfully detonated the world's first atomic warhead, an implosion-type plutonium bomb that transformed the New Mexico desert into radioactive green glass. Six days later, President Truman wrote in his journal: "We have discovered the most terrible bomb in the history of the world. It may be the fire destruction prophesied in the Euphrates Valley Era, after Noah and his fabulous Ark. ... This weapon is to be used against Japan between now and August 10th. I have told the Sec. of War, Mr. Stimson, to use it so that military objectives and soldiers and sailors are the target and not women and children."
Iran tells ISPs to block Telegram
Iranian officials have called for ISPs to block both the mobile and desktop versions of Telegram in the country. ISPs are also reportedly being instructed to block the messaging service in a way that can't be bypassed by a VPN. Reuters reports that Iran's judiciary website Mizan, quoting a court order, said, "All internet providers in Iran must take steps to block Telegram's website and app as of April 30." The site also said that Telegram had threatened the country's security through "propaganda against the establishment, terrorist activities, spreading lies to incite public opinion, anti-government protests and pornography."
DOJ is reportedly investigating Huawei for violating Iran sanctions
The US government (and its intelligence agencies) have been warning consumers against buying Huawei smartphones, which has led to major cellular carriers in the country backing away from deals with the company. But it appears that Huawei's troubles aren't over yet. The Wall Street Journal reports that the US Department of Justice is looking into whether Huawei may have violated the country's sanctions against Iran.
Iran bans banks from trading cryptocurrencies
Iran is borrowing a page from China when it comes to regulating money: if your real-world currency is in trouble, crack down on the virtual kind. The country's central bank has banned other banks and financial institutions from buying, selling or promoting cryptocurrencies in the wake of reforms meant to quell volatility for the Iranian rial, such as banning money changes outside of banks and unifying exchange rates. The rial's value has been plummeting over fears the US would reinstate sanctions that could hurt Iran's economy.
Iranian officials are no longer allowed to use Telegram
During protests and demonstrations back in December, Iran blocked messaging and social media apps such as Telegram and Instagram. The government claimed it was to "maintain peace," but it became clear that they were trying to prevent the protestors from communicating and documenting what was happening. But now, it looks as though Iran has taken the campaign against Telegram one step further: The country has banned government officials from using the service.
Global cyberattack targets 200,000 network switches (updated)
The past few days haven't been great for the internet's broader security. Iran's Communication and Information Technology Ministry has reported that it was a victim in a global cyberattack that compromised about 200,000 Cisco switches that hadn't yet received patches for exploits in the company's legacy Smart Install protocol. The attackers displayed a US flag on at least some screens, complete with a "don't mess with our elections" warning, but the attack wasn't focused on Iran -- only 3,500 switches fell to the exploit in the country. About 55,000 of the victim devices were in the US, IT Minister Mohammad Javad Azari Jahromi said, while 14,000 were in China. Other victims were located in Europe and India.
DOJ indicts nine Iranians for state-sponsored hacking effort
This morning, the Department of Justice announced that nine Iranians have been indicted for an alleged hacking campaign affecting 320 universities around the world, 144 of which were US institutions. The individuals are believed to have been working for the Iranian government and have been accused of stealing research from the affected institutions. They've been indicted on seven federal crimes including computer fraud, wire fraud, conspiracy and identity theft.
Cyber attacks reportedly cost the US as much as $109 billion in 2016
Cyber attacks are increasingly becoming a fact of life. North Korea attacked aerospace and telecom networks last year. Olympics officials confirmed a recent attack that took place during the opening ceremonies. While Russia denied its involvement in the devastating NotPetya attacks, the US has finally joined other countries in blaming Russia for them. Now, a report from the White House Council of Economic Advisers says that malicious cyber activity like this cost the US economy between $57 and $109 billion in 2016.
Iran blocks internet services in bid to quash protests
It's a busy weekend for oppressive governments trying to suppress digital communication. Iran has blocked mobile access to at least Telegram and Instagram as it tries to thwart protests that started over economic concerns (particularly inflation), but have extended into broader resistance to the government and clerical rule. Officials claim the censorship is meant to "maintain peace," but the argument doesn't hold water. Telegram founder Pavel Durov noted that his company refused to shut down "peacefully protesting channels," and Instagram is primarily being used to document protests -- Iran clearly doesn't want to reveal the extent of the demonstrations.
Telegram suspends channel for encouraging violent Iran protests
Iran is currently engulfed in demonstrations: many are protesting the clerical leadership, corruption and increasing costs of living, while counter-protestors are trying to protect the regime. And Telegram finds itself caught in the middle. The chat service has suspended the Amadnews channel after it started encouraging subscribers to lob Molotov cocktails at police, breaking the company's policy against calls for violence. The move came after Iran telecoms minister Mohammad-Javad Azari Jahromi complained to company founder Pavel Durov, who said Telegram would have to block the channel if it was promoting violence as claimed.
The surprising Islamic beauty of 'Engare'
The first question I ask Mahdi Bahrami is, "How do you say the name of your game?" He laughs and responds smoothly, "Yes, it's called En-gar-ay." Engare is an eye-catching game. In Steam's sea of gritty multiplayer shooters, pixelated platformers and cartoonish RPGs, it immediately stands out. Engare is sparse yet richly detailed at the same time, filled with looping lines and delicate curves. It's a game about geometry, art and architecture. Put simply, it's a game about beauty. "When I see these mathematical shapes in a mosque or some other places, I feel like I can see the rules behind it, I can see the mathematics of it," Bahrami says.
Iran blamed for cyberattack on UK parliament
When hackers attacked UK parliament email accounts in June, it was tempting to blame Russia. After all, it's been rather busy lately. However, it looks like people were pointing their fingers in the wrong direction. The Times has learned that British intelligence has pinned the campaign on Iran -- it'd be the country's first cyberattack against the UK, in fact. While the actual damage was relatively limited (about 30 Members of Parliament were compromised out of roughly 9,000 total accounts), the intrusion supports beliefs that Iran has become a serious player in cyberwarfare after years of being little more than a target. Officials aren't commenting on the attack, but there are a few theories as to why Iran would take this risk.
