An Iranian hacking group ran a fake professional recruiting business to lure national security officials across Iran, Syria and Lebanon into a cyber espionage trap, according to new research by US cybersecurity firm Mandiant, a division of Alphabet’s Google Cloud. Researchers said the hackers are loosely connected to a group known as APT42 or Charming Kitten, which was recently accused of hacking the US presidential campaign of Republican candidate Donald Trump. APT42 is widely attributed to an intelligence division of the Iranian Revolutionary Guard, an expansive military organization based in Tehran. The FBI has said it is investigating APT42’s ongoing efforts to interfere in the 2024 US election.
The mission uncovered by Mandiant dates back to at least 2017 and was active until recently. At different times, the Iranians made their operation appear as if it was controlled by Israelis. Analysts say the likely purpose of the impersonation was to identify individuals in the Middle East who were willing to sell secrets to Israel and other Western governments. It targeted military and intelligence staff associated with Iran’s allies in the region.
“The data collected by this campaign may support the Iranian intelligence apparatus in pinpointing individuals who are interested in collaborating with Iran’s perceived adversarial countries,” the Mandiant report said. “The collected data may be leveraged to uncover human intelligence (HUMINT) operations conducted against Iran and to persecute any Iranians suspected to be involved in these operations.”
Iran’s mission to the United Nations did not immediately respond to a request for comment.
Mandiant found that the digital spies used a network of websites impersonating human resources companies to manipulate Farsi-speaking targets. The bogus firms were named VIP Human Solutions, also known as VIP Recruitment, Optima HR and Kandovan HR, among others. They leveraged dozens of inauthentic online profiles on Telegram, Twitter, YouTube and social media platform Virasty, which is popular in Iran, to promote the front companies. Nearly all the associated Internet accounts have since been removed.
“VIP Recruitment, a center for recruiting respected military personnel into the army, security services and intelligence from Syria and Hezbollah, Lebanon,” said a statement on one of the websites. “Join us to help each other impact the world. Our duty is to protect your privacy.”
The hackers cast a wide net by using various social media platforms to disseminate links about their fake HR scheme. It is unclear how many targets ultimately fell for the ruse. The collected data, which included addresses, contact details and other resume-related data, could still be exploited in the future, Mandiant said.
Iran operated fake human-resources firm to root out unfriendly spies, researchers say
https://arab.news/wraeb
Iran operated fake human-resources firm to root out unfriendly spies, researchers say
- The hackers cast a wide net by using various social media platforms to disseminate links about their fake HR scheme
Homeless Muslims in southern Philippines observe Ramadan as month of trial
- Thousands lost their homes when parts of Bongao in Tawi-Tawi were burnt to ashes
- Many trying to fully observe the fasting month say they are grateful to be alive
Manila: As Annalexis Abdulla Dabbang was looking forward to observing the month of Ramadan with her family, just days before it began they lost everything when an enormous fire tore through whole neighborhoods of their city in the southernmost province of the Philippines.
Bongao is the capital of Tawi-Tawi, an island province, forming part of the country’s Muslim minority heartland in the Bangsamoro region. The city experienced its worst fire in years in early February, when flames swept through the coastal community, leaving more than 5,000 people homeless.
“We were swimming for our lives. We had to swim to escape from the fire ... We swam in darkness, and (even) the sea was already hot because of the fire,” Dabbang, a 27-year-old teacher, told Arab News.
“Everything we owned was gone in just a few hours — our home, our memories, the things we worked hard for, everything turned to ashes.”
Trying to save their 2-year-old daughter and themselves, she and her husband left everything behind — as did hundreds of other families that together with them have since taken shelter at the Mindanao State University gymnasium — one of the evacuation centers.
Unable to secure a tent, Dabbang’s family has been sleeping on the bleachers, sharing a single mat as their bed. When Ramadan arrived a few days after they moved to the makeshift shelter, they welcomed it in a different, more solemn way. There is no family privacy for suhoor, no room or means to welcome guests for iftar.
“Ramadan feels different now. It’s painful but at the same time more real. When we lost our home, we began to understand what sacrifice really means. When you sleep in an evacuation center, you understand hunger, discomfort in a deeper way,” Dabbang said.
“We don’t prepare special dishes. We prepare our hearts.”
While she and thousands of others have lost everything they have ever owned, she has not lost her faith.
“Our dreams may have turned to ashes, but our prayers are still alive,” she said.
“This Ramadan my prayers are more emotional than ever. I pray for strength, not just for myself, but for my family and for every neighbor who also lost their family home. I pray for healing from the trauma of fire. I pray that Allah will replace what we lost with something better. I pray for the chance to rebuild not just our house, but our sense of security.”
Juraij Dayan Hussin, a volunteer helping the Bongao fire victims, observed that many of them were traumatized and the need to cleanse the heart and mind during Ramadan was what kept many of them going, because they are “thankful that even though they lost their property, they are still alive.”
But the religious observance related to the fasting month is not easy in a cramped shelter.
“It’s hard for Muslims to perform their prayers when they do not have their proper attire because they usually have specific clothes for prayer,” he said. “Sanitation in the area is also an issue ... when you fast and when you pray, cleanliness is essential.”
For Abdulkail Jani, who is staying at a basketball court with his brother and more than 70 other families, this Ramadan will be spent apart from their parents, whom they managed to move to relatives.
“The month of Ramadan this year is a month of trial ... there will be a huge change from how we observed Ramadan in the past, but we will adjust to it and try to comfort ourselves and our family. The most important thing is that we can perform the fasting,” he told Arab News.
“Despite our situation now, despite everything, as long as we’re alive, we will observe Ramadan. We’ll try to observe it well, without missing anything.”
