Iranian Threat Actor Neptunium Associated With Charlie Hebdo Cyber-Attacks

The Iranian menace actor known as Neptunium by Microsoft has been associated by the tech huge with a the latest hacking operation concentrating on the satirical French magazine Charlie Hebdo.

Microsoft’s Electronic Danger Assessment Heart (DTAC) shared the conclusions very last Friday in a site submit, adding that Neptunium is probable the exact team that has been discovered by the US Section of Justice (DoJ) as “Emennet Pasargad” in the previous.

“In early January, a earlier unheard-of on the web group contacting alone ‘Holy Souls,’ which we can now determine as Neptunium, claimed that it experienced received the personalized information of additional than 200,000 Charlie Hebdo shoppers just after ‘gain[ing] entry to a databases,'” reads the web site publish.

“This data, received by the Iranian actor, could set the magazine’s subscribers at risk of on-line or bodily concentrating on by extremist companies.”

In accordance to the security industry experts, the attack was executed in retaliation for a cartoon contest by Charlie Hebdo aimed at “ridiculing” Iranian Supreme Chief Ali Khamenei.

Microsoft said Neptunium marketed the trove of stolen info on YouTube and various dark web community forums for 20 Bitcoin (roughly $340,000 at the time).

“There are several elements of the attack that resemble earlier attacks conducted by Iranian country-condition actors,” reads the Microsoft article by DTAC basic supervisor Clint Watts.

These include things like a hacktivist persona declaring credit score for the cyber-attack, claims of profitable web page defacement, leaked private info on line, inauthentic social media “sockpuppet” personas, the impersonation of authoritative sources and contacting news media businesses.

Composing in an advisory very last 12 months, the US DoJ confirmed Microsoft’s new claims, indicating Emennet poses a broader cybersecurity risk exterior of info functions.

“Since 2018, Emennet has done classic cyber exploitation exercise targeting a number of sectors, like news, shipping and delivery, travel (hotels and airways), oil and petrochemical, economical, and telecommunications, in the United States, Europe, and the Middle East.”

Both equally the Microsoft and DoJ advisories consist of recommendations to support process administrators protect networks from Neptunium’s attacks.

The news will come times following Iranian danger actor Cobalt Sapling was noticed focusing on Saudi Arabia with a new persona identified as “Abraham’s Ax.”

Some parts of this write-up are sourced from:
www.infosecurity-magazine.com