Potential Cyberthreats are everywhere: Lets see what we can do

While the alert I’m posting was sent out in January for a specific reason, I’m trying to find things that may be still valuable to post even though what it is talking about may not be relevant. This is because the concepts in this and other types of articles may be still valuable to help people understand what threat actors are up to. In Potential for Iranian Cyber Response to U.S. Military Strike in Baghdad we learn that there are many different types of techniques the actors may have used in this attack, and the response to prevent this can be still true today even though this may have passed. Its important to understand these things, so that if you get an email that may be similar to what the article discusses, you understand what you should or should not do.

Technical Details
Iranian Cyber Threat Profile
Iran has a history of leveraging asymmetric tactics to pursue national interests beyond its conventional capabilities. More recently, its use of offensive
cyber operations is an extension of that doctrine. Iran has exercised its increasingly sophisticated capabilities to suppress both social and political
perspectives deemed dangerous to Iran and to harm regional and international opponents.
Iranian cyber threat actors have continuously improved their offensive cyber capabilities. They continue to engage in more “conventional” activities ranging
from website defacement, distributed denial of service (DDoS) attacks, and theft of personally identifiable information (PII), but they have also demonstrated
a willingness to push the boundaries of their activities, which include destructive wiper malware and, potentially, cyber-enabled kinetic attacks.
The U.S. intelligence community and various private sector threat intelligence organizations have identified the Islamic Revolutionary Guard Corps (IRGC)
as a driving force behind Iranian state-sponsored cyberattacks–either through contractors in the Iranian private sector or by the IRGC itself.

Don’t let that fool you when it comes to other similar types of email. Threats are more than ramping up, and this is something that we need to be aware of today. The landscape is different, lets protect ourselves the best we can.