The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the Communications Security Establishment Canada (CSE), the Australian Federal Police (AFP) and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) have released a joint cybersecurity advisory to warn network defenders of Iranian cyber actors’ use of brute force and other techniques to compromise multiple critical infrastructure sectors. The actors likely aim to obtain credentials and information describing the victim’s network that can then be sold to enable access to cyber criminals.
The alert is available directly here.
