Iranian hackers are targeting American critical infrastructure, US agencies warn

U.S. authorities are sounding the alarm over a significant rise in cyberattacks orchestrated by hackers with ties to the Iranian government, specifically targeting vital infrastructure across the nation. A joint advisory released on Tuesday by the FBI, the National Security Agency, the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Energy warns that these hackers are increasingly exploiting internet-facing systems across various sectors, including water, wastewater, energy, and local government operations. While the advisory refrains from naming specific targets, it highlights a concerning trend aimed at creating disruption within the United States. Reports indicate that these cyberattacks have already led to operational interruptions and financial setbacks. The malicious actors are focusing their efforts on programmable logic controllers and supervisory control and data acquisition (SCADA) systems, which are essential for monitoring and managing industrial operations crucial to the nation’s infrastructure. The advisory points out that these hackers have been able to alter information presented on these systems and manipulate project files that contain critical configuration settings. This escalation in cyber tactics is believed to be a direct response to the ongoing conflict between the U.S. and Iran, particularly following the recent military actions that have intensified tensions. Adding to the urgency of this warning, recent comments from U.S. President Trump on social media hinted at severe consequences for Iran should they fail to negotiate regarding the Strait of Hormuz, a vital shipping corridor. Since the onset of hostilities, the Iranian hacking group known as Handala has been implicated in various high-profile cyber incidents, including a significant breach at Stryker, a major medical technology firm, where hackers utilized the company’s security tools to wipe devices remotely. The FBI has also linked Handala to the breach of sensitive emails from FBI director Kash Patel, further underscoring the reach and impact of these cyber threats. In tandem, Iran has conducted missile strikes against U.S. data centers in the region, further destabilizing cloud services and raising alarms about the vulnerability of critical infrastructure in the face of escalating cyber warfare.