Cyber attacks against US networks by pro-Iranian hacktivists are likely

telcodad

A bulletin from the National Terrorism Advisory System warns of a “heightened threat environment in the United States” following the U.S. military strikes on Iran’s nuclear sites. The bulletin, obtained by CBS News and dated Sunday morning, June 22, does not note any current specific threats, but warns that “low level cyber attacks against US networks by pro-Iranian hacktivists are likely, and cyber actors affiliated with the Iranian government may conduct attacks against US networks.”

Terrorism advisory bulletin warns of “heightened threat environment” in U.S. after strikes on Iran
By Jennifer Jacobs & Nicole Sganga, CBS News - June 22, 2025
https://www.cbsnews.com/news/terrorism-advisory-bulletin-threats-us-iran-strikes/

The bulletin, which has not yet been officially shared with the public by the Department of Homeland Security, is the type of comprehensive threat assessment designed to communicate information directly to the public about threats and about “resources for how to stay safe during the heightened threat environment.”

Multiple sources tell CBS News that intelligence analysts began crafting this document earlier this month. It’s gone through many iterations, with plans to publish following any escalation in the conflict overseas or intervention by the United States. When the advisory is finalized, it will be made public at this government website: https://www.dhs.gov/national-terrorism-advisory-system

egeezer

My work device pinged me yesterday with two bulletins regarding both cyber and physical threats.

Asymmetric warfare is concerning. Iran is presently unable to carry out open conventional warfare with soldiers, planes tanks etc. however, IEDs, cyber and small scale terrorism attacks are options for them.

With the present environment with respect to communicable disease mitigation, a biological attack is not out of the question. Unlike North Korea, I wouldn’t see China or Russia publicly assisting Iranian retaliations, but instead, tacit approval and surreptitious assistance with development of bioweapons. We would be wise to develop monitoring and quick response resources to deal with bio, chemical and other similar attacks.

GeekGirl1

telcodad I’d say it’s finalized. Summary of the Threat to the United States

Issued: June 22, 2025
Expires: September 22, 2025 at 11:59 PM ET

GrumpyCanadian

egeezer Unlike North Korea, I wouldn’t see China or Russia publicly assisting Iranian retaliations, but instead, tacit approval and surreptitious assistance with development of bioweapons.

They may not get directly involved, but an Iranian minister is already said to have made a trip to see Vladimir and company. Medvedev has already commented that these actions will not “obliterate” Iran’s nuclear ambitions, and has already hinted that certain countries are likely already willing to provide Iran with nuclear weapons. I don’t know if he meant to imply Russia, since they are a signatory to the Non-Proliferation Treaty, but just hearing that isn’t particularly encouraging, as if your other points weren’t already concerning enough.

According to many reports, a great deal of U.S. infrastructure is vulnerable to infiltration and nefarious manipulation. There are many avenues of retaliation, unfortunately. (No, I’m not claiming ours is better; I just don’t think Iran, specifically, would see a need to attack ours yet.)

egeezer

GrumpyCanadian
The US backed out of a nuclear missile non-prolification treaty with Russia in 2019, and the nuclear JCPOA agreement with Iran in 2018 without negotiating another treaty or agreement. After these were lifted, Russia resumed its development and Iran resumed uranium acquisition and started enrichment beyond civilian concentrations.

With respect to cyber, the US has reduced staffing levels for cyber security related teams and analysts, and may need to replenish those assets to meet increased numbers and sophistication of threats. Recent security breaches at sensitive levels demonstrate the need to address the increased threat to public and private entities and infrastructures.

GrumpyCanadian

egeezer The US backed out of a nuclear missile non-prolification treaty with Russia in 2019, and the nuclear JCPOA agreement with Iran in 2018 without negotiating another treaty or agreement.

I haven’t found any reference to Russia leaving. I was referring to the Treaty on the Non-Proliferation of Nuclear Weapons. The only former signatory that stood out as having withdrawn was North Korea. As far as I can tell, both Russia and the United States have not (yet) withdrawn. Are we referring to a different agreement?

egeezer

GrumpyCanadian

It was the INF..
https://www.bbc.com/news/world-us-canada-49198565

JanJ

I had to laugh:

NOW they say we should tighten our security?????

I guess: Up till now we didn’t have to worry?

telcodad

Iranian-backed hackers go to work after US strikes
By DAVID KLEPPER, AP - June 25, 2025
https://apnews.com/article/iran-trump-cybersecurity-hacking-9009bff8425d97366e9423b50fb52edf

Hackers backing Tehran have targeted U.S. banks, defense contractors and oil industry companies following American strikes on Iranian nuclear facilities — but so far have not caused widespread disruptions to critical infrastructure or the economy. But that could change if the ceasefire between Iran and Israel collapses or if independent hacking groups supporting Iran make good on promises to wage their own digital conflict against the U.S., analysts and cyber experts say.
:
Hackers have hit banks and defense contractors
Two pro-Palestinian hacking groups claimed they targeted more than a dozen aviation firms, banks and oil companies following the U.S. strikes over the weekend. The hackers detailed their work in a post on the Telegram messaging service and urged other hackers to follow their lead, according to researchers at the SITE Intelligence Group, which tracks the groups’ activity. The attacks were denial-of-service attacks, in which a hacker tries to disrupt a website or online network.

“We increase attacks from today,” one of the hacker groups, known as Mysterious Team, posted Monday.

Federal authorities say they are on guard for additional attempts by hackers to penetrate U.S. networks. ….