NSA And NCSC Warning: Russian Hackers Disguised As Iranian Spies Attacked 35 Countries
The US National Security Agency (NSA) and the UK National Cyber Security Centre (NCSC) warned on Monday that the Russian state-backed hacking group Turla (aka Snake or Uroburos) has been impersonating Iranian state-sponsored hackers in a campaign targeting organizations in the US, the UK and 33 other countries, many of them located in the Middle East.
The campaign targeted entities in various sectors. The targets included government departments, military agencies, scientific organizations and academic institutions. The hackers used Iranian tools and infrastructure to make it seem like the campaign was orchestrated by Tehran. Paul Chichester of the NCSC said that “identifying those responsible for attacks can be very difficult, but the weight of evidence points towards the Turla group being behind this campaign.”