Facebook on Thursday said it disrupted an Iran-based espionage operation targeting defense and aerospace workers in Europe and the United States.

Fake accounts posing as company job recruiters or employees were used to dupe targets, according to head of cyber espionage investigations Mike Dvilyanski.

"This effort was highly targeted," Dvilyanski said in a telephone briefing.

"It is hard for us to know how successful this campaign was, but it had all the hallmarks of a well-resourced operation."

Some of the malicious code used in the cyber spying campaign was developed by Mahak Rayan Afraz tech company in Tehran with ties to Islamic Revolutionary Guard Corps, according to Dvilyanski.

Facebook took down 200 accounts it said where used to dupe defense or aerospace industry workers into connecting outside the social network, say by email or at bogus job websites.

The group referred to as "Tortoiseshell" had focused its activities in the Middle East until last year, when it took aim primarily at the United States, according to Dvilyanski.

"This group used various malicious tactics to identify its targets and infect their devices with malware to enable espionage," said Facebook director of threat disruption David Agranovich.

"Our platform was one of the elements of the much broader cross-platform cyber espionage operation, and its activity on Facebook manifested primarily in social engineering and driving people off-platform."

Malware slipped onto devices of victims was designed to glean information including log-in credentials to email or social media, according to Dvilyanski.

Facebook said it appeared fewer than 200 users may have fallen for the ruse, and that those people have been notified of the deception.

Facebook also blocked some of the booby-trapped website links from being shared at the social network, according to executives.

The US tech giant added that it shared findings with internet industry peers and law enforcement.

"We were only part of this campaign, and we are taking action on our platform," Dvilyanski said.

Related Links
Learn about nuclear weapons doctrine and defense at SpaceWar.com
Learn about missile defense at SpaceWar.com
All about missiles at SpaceWar.com
Learn about the Superpowers of the 21st Century at SpaceWar.com

Tweet

Thanks for being here; We need your help. The SpaceDaily news network continues to grow but revenues have never been harder to maintain. With the rise of Ad Blockers, and Facebook - our traditional revenue sources via quality network advertising continues to decline. And unlike so many other news sites, we don't have a paywall - with those annoying usernames and passwords. Our news coverage takes time and effort to publish 365 days a year. If you find our news sites informative and useful then please consider becoming a regular supporter or for now make a one off contribution.
SpaceDaily Contributor $5 Billed Once credit card or paypal		SpaceDaily Monthly Supporter $5 Billed Monthly paypal only

US lets Iran use frozen funds to pay back Japan, S.Korea
Washington (AFP) July 14, 2021
The United States said Wednesday it was allowing Iran to use frozen funds to settle debts in South Korea and Japan, as talks drag on over reviving a nuclear deal that could see sanctions relief. The United States maintains sweeping sanctions on the clerical regime, meaning that companies that deal with many bank accounts in Iran can face legal penalties in the world's largest economy. The State Department said that it has been letting Japanese and South Korean companies receive payments from US- ... read more