In recent years, Iranian hackers have been targeting current and former US officials from both the Trump and Biden administrations. They have used phishing schemes to gain access to email accounts and collect valuable intelligence. The hackers, believed to be working on behalf of Iran’s Islamic Revolutionary Guard Corps (IRGC), have targeted Iran hawks, former diplomats, and even journalists and think tankers in Washington, DC. These hacking attempts have raised concerns among US intelligence agencies about Iran’s intentions and capabilities in cyberspace.
The Iranian hackers have followed a hack-and-leak playbook similar to Russia’s tactics in the 2016 election. They have successfully targeted the Trump campaign, stole internal campaign documents, and shared them with news organizations. US officials are on high alert for Iran’s next move, as the country continues to deny allegations of cyberattacks. The unpredictability of Iran’s cyber activities poses a challenge for US officials, who have attributed various cyber incidents to Tehran, including attacks on critical infrastructure and threats to US election officials.
Iran’s hacking program, although not as advanced as those of China, Russia, or the US, has built up a capable cadre of cyber operatives over the last decade. The country has regularly attacked critical infrastructure in the US and the Middle East. US officials are particularly concerned about Iran’s access to email accounts of current and former officials, as it could be used to leak documents or sow discord. Iran’s willingness to use cyber means to advance its national security interests has put it on the radar of US intelligence and security agencies.
Aside from espionage, some Iranian cyber activities have darker implications, including collecting data for kidnapping and assassination plots. Hackers linked to the IRGC have been involved in at least 10 potential threats to kidnap or kill people in the UK, with at least one plot aided by Iranian hacking efforts. Iranian journalist Masih Alinejad, who has been the target of multiple assassination plots, receives numerous hacking attempts on her phone. The hackers’ broad mandate to collect data for potential plots has led to increased scrutiny of Iran’s external operations in various countries.
With the upcoming 2024 presidential election, US officials are closely monitoring Iran’s cyber activities as the country emerges as one of the most aggressive foreign powers trying to sow discord. This election cycle has seen Iranian attempts to hack the Trump campaign and an alleged plot to kill the candidate himself. Despite Iran’s denials of cyberattacks, US intelligence agencies believe that the regime is desperate to shape the outcome of the elections. The increase in Iranian cyber activities, from espionage to potential assassination plots, highlights the evolving threat posed by Tehran in cyberspace and beyond.
