New Iran Cyber Attacks will Target Android Apps

Cybersecurity experts are warning that Iran is preparing cyber attacks against mobile device users. Ransomware and malware attacks are expected to target mobile Android-based devices. Users should be especially cautious toward unofficial markets that offer Android apps.

Azadi Tower, Azadi Square, Tehran, Iran

Accenture iDefense wrote in a recent cyber threat report that its intelligence team has measured a “significant uptick” in cyber attack campaigns launched from Iran. The report, titled “Cyber Threatscape Report 2018,” expects these attacks to increase in frequency into 2019.

Both state actors and Iranian hacktivists seem to favor attacking apps that are unverified by the Google app store. These attacks seek to plant malware into mobile devices. Buyers should also be forewarned that Iranian hackers are working to plant malicious code into verified apps at the Google store, Accenture wrote.

The cybersecurity company is tracking an Iranian gang called Pipefish. This group is attacking organizations in the Middle East for espionage purposes. The attack could target Israel, Saudi Arabia, Bahrain and other countries that supported the US and its decision to cancel the controversial Iran nuclear accord.

Pipefish has developed a toolbox that exploits machines to carry out remote execution commands. The gang has apparently used a crypto-jacking exploit that has already shut down or disrupted Middle East pipelines and facilities.

Tehran Iran

Ransomware, though, appears to be the tool of choice from Iran, Accenture wrote. The Islamic Revolutionary Guard is the main actor in the use of ransomware.

According to the cybersecurity analysis, the ransomware attackers will demand crypto ransoms – payment in Bitcoin. One ransomware called “Black Ruby” scrambles and encrypts files and demands $650 in crypto-coin BTC.

The impetus behind this latest cyber warfare appears to be that the Iranian mullahs and the country’s criminal class are angry that the United States is clamping sanctions on the country again. The sanctions will hit Iran hard in its wallet. Thus, Iranian state actors and the criminal element will use cyber attacks to steal cash.

People who download Android apps, especially from unapproved sources, should exercise extreme caution. Cybersecurity experts are warning that the Iranians are on the prowl, looking for ways to snatch cash from Android users.

Isaac Adams-Hands

Full Stack Developer, Digital Marketer, and InfoSec enthusiast. He received his Bachelor’s Degree from the University of Western Sydney and his Business Diploma from Georgian College before joining various marketing positions in search portals, e-commerce, higher education, and addiction recovery services.

Follow @ twitter

Related posts

The 13 Most Important Skills to have as a Cyber Defender

The information security professionals of today have a requirement of learning more swiftly, communicating more effectively, containing more knowledge about the business, and matching the ever-improving capabilities of adversaries. Not so long ago, to survive in this field, all you needed was creativity, problem-solving, and a healthy dose of technical understanding. But today, the security… Read More

Are You Using The Most Hackable Password?

More than 23 million people have used the world’s most hackable password. How many passwords do you have to remember? Email accounts, social media platforms, online bill pay, online banking and online retailers all require passwords. For convenience, over 23 million of us chose 12345 as a password and ended up being hacked. This is… Read More