US, Iranian hackers in tit-for-tat cyberattacks amid rising tensions

A US Department of Justice employee puts up a poster of the seven indicted hackers prior to a news conference on March 2 in Washington. (AFP)
Updated 23 June 2019
Follow

US, Iranian hackers in tit-for-tat cyberattacks amid rising tensions

  • Iran has long targeted the US oil and gas sectors and other critical infrastructure
  • Tensions spiked this past week after Iran shot down an unmanned US drone

WASHINGTON: US military cyber forces launched a strike against Iranian military computer systems on Thursday as President Donald Trump backed away from plans for a more conventional military strike in response to Iran’s downing of a US surveillance drone, US officials said Saturday.
Two officials told The Associated Press that the strikes were conducted with approval from Trump. A third official confirmed the broad outlines of the strike. All spoke on condition of anonymity because they were not authorized to speak publicly about the operation.
The cyberattacks — a contingency plan developed over weeks amid escalating tensions — disabled Iranian computer systems that controlled its rocket and missile launchers, the officials said. Two of the officials said the attacks, which specifically targeted Iran’s Islamic Revolutionary Guard Corps computer system, were provided as options after Iranian forces blew up two oil tankers earlier this month.
The IRGC, which was designated a foreign terrorist group by the Trump administration earlier this year, is a branch of the Iranian military.
The action by US Cyber Command was a demonstration of the US’s increasingly mature cyber military capabilities and its more aggressive cyber strategy under the Trump administration. Over the last year US officials have focused on persistently engaging with adversaries in cyberspace and undertaking more offensive operations.
Tensions have escalated between the two countries ever since the US withdrew last year from the 2015 nuclear deal with Iran and began a policy of “maximum pressure.” Iran has since been hit by multiple rounds of sanctions. Tensions spiked this past week after Iran shot down an unmanned US drone — an incident that nearly led to a US military strike against Iran on Thursday evening.
The cyberattacks are the latest chapter in the US and Iran’s ongoing cyber operations targeting the other. Yahoo News first reported the cyber strike.

Iranian attacks
In recent weeks, hackers believed to be working for the Iranian government have targeted US government agencies, as well as sectors of the economy, including finance, oil and gas, sending waves of spear-phishing emails, according to representatives of cybersecurity companies CrowdStrike and FireEye, which regularly track such activity. This new campaign appears to have started shortly after the Trump administration imposed sanctions on the Iranian petrochemical sector this month.
It was not known if any of the hackers managed to gain access to the targeted networks with the emails, which typically mimic legitimate emails but contain malicious software.
Tensions have run high between the two countries since the US withdrew from the 2015 nuclear deal with Iran last year and began a policy of “maximum pressure.” Iran has since been hit by multiple rounds of sanctions. Then Iran shot down an unmanned US drone this week.
“Both sides are desperate to know what the other side is thinking,” said John Hultquist, director of intelligence analysis at FireEye. “You can absolutely expect the regime to be leveraging every tool they have available to reduce the uncertainty about what’s going to happen next, about what the US’s next move will be.”
CrowdStrike shared images of the spear-phishing emails with the AP.
One such email that was confirmed by FireEye appeared to come from the Executive Office of the President and seemed to be trying to recruit people for an economic adviser position. Another email was more generic and appeared to include details on updating Microsoft Outlook’s global address book.
The Iranian actor involved in the cyberattack, dubbed “Refined Kitten” by CrowdStrike, has for years targeted the US energy and defense sectors, as well as allies such as Saudi Arabia and the United Arab Emirates, said Adam Meyers, vice president of intelligence at CrowdStrike.
The Department of Homeland Security said in a statement released Saturday that its agency tasked with infrastructure security has been aware of a recent rise in malicious cyber activities directed at US government agencies by Iranian regime actors and proxies.
Cybersecurity and Infrastructure Security Agency Director Christopher C. Krebs said the agency has been working with the intelligence community and cybersecurity partners to monitor Iranian cyber activity and ensure the US and its allies are safe.
“What might start as an account compromise, where you think you might just lose data, can quickly become a situation where you’ve lost your whole network,” Krebs said.
The National Security Agency would not discuss Iranian cyber actions specifically, but said in a statement to the AP on Friday that “there have been serious issues with malicious Iranian cyber actions in the past.”
“In these times of heightened tensions, it is appropriate for everyone to be alert to signs of Iranian aggression in cyberspace and ensure appropriate defenses are in place,” the NSA said.

"Contentious cyber history"

Iran has long targeted the US oil and gas sectors and other critical infrastructure, but those efforts dropped significantly after the nuclear agreement was signed. After Trump withdrew the US from the deal in May 2018, cyber experts said they have seen an increase in Iranian hacking efforts.

“This is not a remote war (anymore),” said Sergio Caltagirone, vice president of threat intelligence at Dragos Inc. “This is one where Iranians could quote unquote bring the war home to the United States.”
Caltagirone said as nations increase their abilities to engage offensively in cyberspace, the ability of the United States to pick a fight internationally and have that fight stay out of the United States physically is increasingly reduced.
The US has had a contentious cyber history with Iran.
In 2010, the so-called Stuxnet virus disrupted the operation of thousands of centrifuges at a uranium enrichment facility in Iran. Iran accused the US and Israel of trying to undermine its nuclear program through covert operations.
Iran has also shown a willingness to conduct destructive campaigns. Iranian hackers in 2012 launched an attack against state-owned oil company Saudi Aramco, releasing a virus that erased data on 30,000 computers and left an image of a burning American flag on screens.
In 2016, the US indicted Iranian hackers for a series of punishing cyberattacks on US banks and a small dam outside of New York City.
The Defense Department refused to comment on the latest Iranian activity. “As a matter of policy and for operational security, we do not discuss cyberspace operations, intelligence or planning,” Pentagon spokeswoman Heather Babb said in a statement. The White House did not respond to a request for comment.
Despite the apparent cyber campaign, experts say the Iranians would not necessarily immediately exploit any access they gain into computer systems and may seek to maintain future capabilities should their relationship with the US further deteriorate.
“It’s important to remember that cyber is not some magic offensive nuke you can fly over and drop one day,” said Oren Falkowitz, a former National Security Agency analyst. It takes years of planning, he said, but as tensions increase, “cyber impact is going to be one of the tools they use and one of the hardest things to defend against.”


Libya authorities intercept over 100 migrants off coast

Updated 08 July 2025
Follow

Libya authorities intercept over 100 migrants off coast

  • Libya has been gripped by unrest since the 2011 overthrow and killing of longtime ruler Muammar Qaddafi in a NATO-backed uprising

TRIPOLI: Libyan authorities on Monday said they had intercepted 113 migrants off the country’s coast and recovered three bodies in separate operations over three days.
The bodies of three “illegal migrants of African nationalities” were discovered on a beach in Misrata, some 200 kilometers (125 miles) east of Tripoli, the Ministry of Interior said.
Also on Monday, security forces on a speedboat intercepted 54 migrants off Garabulli, 50 kilometers east of the capital Tripoli, the ministry added.
They were brought back to the capital’s port and handed over to the competent authorities, it said.
The day before, “as part of a plan to intensify maritime patrols during the summer,” 20 migrants “of various nationalities” were rescued off Zawiya, 45 kilometers west of Tripoli, the ministry said Sunday.
On Saturday, 39 migrants were intercepted off the eastern coast of Tripoli, the ministry reported, without providing further details about where they were found or their point of departure.
Libya has been gripped by unrest since the 2011 overthrow and killing of longtime ruler Muammar Qaddafi in a NATO-backed uprising.
It has become a hub for tens of thousands of migrants trying to reach Europe, risking their lives at sea.
Migrants intercepted by Libyan authorities — even in international waters before reaching the Italian coast, some 300 kilometers away — are forcibly returned to Libya and held in detention under harsh conditions frequently condemned by the United Nations.
 

 


Ending war in Gaza is ‘Trump’s utmost priority’

Updated 07 July 2025
Follow

Ending war in Gaza is ‘Trump’s utmost priority’

  • Israel’s refusal to allow free and safe entry of aid is key sticking point in Doha truce talks

WASHINGTON: US President Donald Trump’s “utmost priority” is to end the war in Gaza and free hostages held by Hamas, the White House said on Monday before a crucial meeting with Israeli Prime Minister Benjamin Netanyahu.
Trump’s special envoy Steve Witkoff will this week travel to Qatar, where Israel and Hamas are holding indirect talks. Israel’s refusal to allow the free and safe entry of humanitarian aid into Gaza remains the main obstacle to progress in the ceasefire talks in Doha, Palestinian sources said. Mediators hosted two more rounds of discussions on Monday. 

The US-backed proposal for a 60-day ceasefire envisages a phased release of hostages, Israeli troop withdrawals from parts of Gaza and discussions on ending the war entirely.
Hamas has long demanded a final end to the war before it would free remaining hostages, but Israel will not halt fighting until all hostages are free and Hamas dismantled. Trump said last week that he would be “very firm” with Netanyahu on the need for a speedy Gaza deal.
However, Israel has intensified its military campaign in Gaza and sharply restricted food distribution. “God willing, a truce will take place,” Mohammed Al-Sawalheh, 30, from Jabaliya in northern Gaza, said on Monday after another Israeli air strike. “We cannot see a truce while people are dying. We want a truce that will stop this bloodshed.”


Syrian wildfires spread for fifth day due to heavy winds and war remnants

Updated 07 July 2025
Follow

Syrian wildfires spread for fifth day due to heavy winds and war remnants

  • The fires have proven difficult to bring under control despite reinforcements from Jordan, Turkiye and Lebanon

LATAKIA: Syrian firefighters are facing heavy winds, high temperatures and ordnance left behind from the 13-year civil war as they try to extinguish some of country’s worst wildfires in years for the fifth day, a government minister said Monday.
The fires, which started last week, have proven difficult to bring under control despite reinforcements from Jordan, Turkiye and Lebanon that came to the war-torn country to help Syrian teams fight the blaze.
Syrian Minister of Emergency and Disaster Management Raed Al-Saleh said their main challenges are two locations in the coastal province of Latakia that they have been trying to control for two days.
“We have controlled other locations,” Al-Saleh told The Associated Press at the scene.
On the second day of the fire, firefighters managed to get 90 percent of the wildfires under control but explosions of left-over war ordnance and heavy winds helped spread the fires again, Al-Saleh said. He added that 120 teams are fighting the blazes.
On Monday, the Lebanese army said it sent two helicopters to help fight the fires in coordination with Syrian authorities.
Over the weekend, UN teams deployed to the Syrian coast where they are conducting urgent assessments to determine the scale of the damage and to identify the most immediate humanitarian needs.
Summer fires are common in the eastern Mediterranean region, where experts warn that climate change is intensifying conditions that then lead to blazes.
Also, below-average rainfall over the winter left Syrians struggling with water shortages this summer, as the springs and rivers that normally supply much of the population with drinking water have gone dry.


US envoy praises Lebanon’s ‘well-balanced’ response on Hezbollah disarmament

Updated 07 July 2025
Follow

US envoy praises Lebanon’s ‘well-balanced’ response on Hezbollah disarmament

  • Ambassador Tom Barrack holds separate talks with President Aoun, PM, parliament speaker
  • ‘An opportunity is on the horizon,’ he says

BEIRUT: US envoy Tom Barrack said he was “very satisfied” with how Lebanon responded to a US proposal aimed at disarming Hezbollah.

The comments from the US ambassador to Turkiye and special envoy for Syria and Lebanon came after his meeting with President Joseph Aoun on Monday.

Barrack’s meetings with Lebanese officials took place while Israeli reconnaissance planes were hovering over Beirut and the Presidential Palace in Baabda.

A security source told Arab News that the US delegation “expressed its surprise at the overflight, using the term ‘weird’ to describe it, especially since the roar of the aircraft was audible inside the meeting hall.”

Barrack received the Lebanese leadership’s response to the US proposals aimed at establishing a road map for implementing the ceasefire agreement between Hezbollah and Israel, and focusing on confining weapons solely to the Lebanese state.

On the eve of Barrack’s visit, the Israeli army launched a series of airstrikes on several areas in the south and the Bekaa Valley. The attacks left 10 people injured, including a child, the Ministry of Health said.

Besides Aoun, Barrack held talks with Lebanon’s Parliament Speaker Nabih Berri — who is in charge of communicating with Hezbollah regarding the negotiations with the American side — and Prime Minister Nawaf Salam, with each meeting lasting over an hour.

In a statement issued by its media office, the presidency emphasized that Aoun provided Lebanese ideas for a comprehensive solution.

Berri’s media office said that the meeting was “very good and constructive and clearly took into account Lebanon’s interests and sovereignty, the concerns of the Lebanese people and Hezbollah’s demands.”

A political source told Arab News that Hezbollah “did not provide the response-drafting committee with answers but rather a set of questions reflecting its concerns.”

In a press conference at the presidential palace, Barrack described his meeting with Aoun as “very interesting and satisfying.”

US President Donald Trump and Secretary of State Marco Rubio were “deeply grateful for the promptness and the well-balanced, considerate tone of the response to our proposals,” he said.

“It is a highly critical period for Lebanon and the region. An opportunity is on the horizon as the region undergoes significant changes and everything is moving at a remarkable pace. The countries around us are undergoing constant transformation,” he said.

Barrack said Trump had expressed his commitment to and deep respect for Lebanon, as well as his support and desire to help it achieve peace and prosperity.

“I don’t believe there has been any statement like that since the time of Dwight Eisenhower,” he said.

On the Lebanese response, Barrack said: “It is thoughtful and considered. We are creating a go-forward plan and to make that we need dialogue. What the government gave us was something spectacular in a very short period. I’m unbelievably satisfied with the response.

“Now what it takes is delving deeper and taking the time to reflect on the details, which we are going to do. I’m very hopeful.

“Of course the complexity of all this is massive but at the end of it, it is simple: Is everybody tired of what has gone on for the past years? And I think the answer is: absolutely yes. Now that we have a new architecture, we must seize the opportunity. Now everybody is going to have to give up something.

“But when you give up something of a hope and expectation of an illusion, of the adversariness that we have had internally, you can get support from the world to do that.”

Regarding how to deal with Hezbollah’s refusal to hand over its weapons to the state, Barrack said: “The good news for the US is that we do not intend to deal with it. We intend for you to deal with it.

“If you want change, you change it, and we will be there to support you. But if you do not want change, it is no problem. This is a call to action.”

Lebanon risked being left behind as change swept through other countries in the region, he said.

Regarding guarantees for Lebanon, Barrack said that “what happened previously was that the specificity in the cessation of hostility agreement just was not sufficient. So neither side trusted the other.

“The mistrust between Israel, Hezbollah and the Lebanese army, all the pieces just never came together, because everybody was in such a hurry to get a transaction done. What your government is doing now is filling in those details.”

The envoy referred to the Taif Agreement, which he considered “almost identical to what is happening today. So let us take lessons from the past.”

“My belief is that Israel wants peace with Lebanon, how to get there is a challenge. Hezbollah is a political party but it also has a militant aspect to it.

“It needs to see that there is a future for it and that that road is not harnessed just solely against it and that there is an intersection of peace and prosperity for it also.”

Barrack said Israel “does not seek war with Lebanon. It is not an occupying force nor does it harbor ambitions to control the country.

“On the contrary, it respects the shared Levantine culture that unites the region. The conflict has been a nightmare for both sides and a growing fatigue is evident.

“Today, a genuine opportunity exists, made possible by the leadership of the US president, particularly through his decisive stance on Israel and Iran. Israel finds itself at a moment of introspection, seeking to show the world that it values patience and is committed to regional calm. I believe their intentions are sincere.

“Syria, once overwhelmed by chaos, is now entering a new phase, marked by hope that the international community will support its reconstruction efforts, which are beginning from the ground up,” Barrack said.

Addressing the prospect of a Syria-Israel agreement, he said: “Dialogue between the two sides has already begun, and we are no longer constrained by the events of 1967, 1974, 1982, 1993, or even by UN Resolution 1707.

“While these events hold historical significance, they are no longer the focal point. What matters now is that all parties are actively seeking to reach an understanding, an effort to de-escalate tensions and bring an end to hostilities through a meaningful agreement.”

According to sources, the Lebanese response “reaffirmed its commitment to Resolution 1701, including the extension of state authority south of the Litani River and the dismantling of unauthorized installations.”

However, it linked “the exclusivity of arms control to Israel’s full implementation of its obligations under the same resolution,” they said.

The Lebanese response stopped short of detailing how Hezbollah would withdraw its weapons north of the Litani and offered neither an implementation mechanism nor a defined timeline for action.

The Lebanese response urged “Arab sponsorship of Lebanese-Syrian relations, emphasizing the importance of facilitating the return of Syrian refugees and strengthening control over the shared border.

“It also underscored the need to address the issue of Palestinian faction arms, under the Taif Agreement and the provisions of Resolution 1701,” the sources said.


Petra tourist numbers plunge by 75 percent due to Iran-Israel war

Updated 07 July 2025
Follow

Petra tourist numbers plunge by 75 percent due to Iran-Israel war

  • Jordan’s major attraction has 16,207 foreign visitors in June compared with 68,349 during the same month in 2023, according to tourism authority
  • Hotels in Petra say more than 90 percent of bookings canceled, leading to closures and staff layoffs

LONDON: The number of foreign visitors to the ancient city of Petra in southern Jordan fell by more than 75 percent in June compared with previous years due to the outbreak of fighting between Iran and Israel, and the conflict in Gaza.

The Petra Development and Tourism Region Authority recorded 16,207 foreign visitors in June compared with 68,349 during the same month in 2023 and 53,888 in June 2019.

The authority said on Monday that the number of foreign visitors in the first half of 2025 has fallen sharply. It recorded 259,798 visitors, including 175,510 foreign tourists, compared with 692,595 visitors, including 606,000 foreigners, in the first half of 2023.

Fares Braizat, head of the Board of Commissioners of the Petra Development and Tourism Region Authority, said that the Israeli conflict in the Gaza Strip, which began in October 2023, along with hostilities between Iran and Israel in June, has significantly contributed to the sharp decline in foreign tourism to Petra.

Middle East airspace was empty of any flight traffic at times during the 12 days of war in June, as Israel launched airstrikes inside Iran, and Tehran fired missiles and combat drones toward Israeli towns. The US also targeted three nuclear sites in Iran. Although there was no travel alert for Jordan by Western countries, similar warnings were issued for Israel, Iran, and later for Qatar as tensions escalated.

Braizat said that the decline in domestic and Arab tourist numbers to Petra has added to the challenges facing tourism businesses since 2023, leading to a decline in revenue. About 85 percent of Jordan’s population depends on tourism, directly or indirectly, with entry fees to archaeological sites the authority’s primary source of income.

He said that the authority has set up plans to support the tourism sector, with hotels in Petra saying that more than 90 percent of bookings have been canceled, leading to closures and staff layoffs.

Abdullah Hasanat, president of the Petra Hotel Cooperative Association, said that 28 hotels with a total of 1,975 rooms have been forced to close, representing 56 percent of all hotel rooms in the Petra region.