Iranian State-Sponsored APT42 Hacker Group Targeting Government, NGOs and Intergovernmental Organizations to Harvest Credentials
Summary
Recent revelations from Google Clouds Mandiant shed light on the nefarious activities of APT42, a state-sponsored cyber espionage group believed to operate on behalf of the Islamic Revolutionary Guard Corps (IRGC) in Iran. With a history dating back to at least 2015, APT42 has emerged as a significant threat, targeting a wide array of entities including NGOs, government institutions, and intergovernmental organizations. By leveraging these deceptive strategies, APT42 gains the trust of unsuspecting victims, enabling them to harvest valuable credentials for unauthorized access. From masquerading as media organizations to impersonating legitimate services, APT42 employs a variety of tactics to lure its victims into divulging their login credentials. Furthermore, the overlap between APT42s activities and those of other Iranian hacking groups, such as Charming Kitten, highlights the coordinated and multifaceted nature of Irans cyber operations.
Classifications
AskAI Classifications
LabelsLinked Companies
