Iran Foreign Ministry Confirms #Cyberattack But Denies Leak Of Documents
On Sunday, Iran’s Foreign Ministry confirmed a cyberattack on its information website but refused details about the leak of any documents and sensitive data.
Its spokesperson Nasser Kanani confirmed that some threat actors gained access to the ministry’s information website. He added that the ministry took essential measures instantly to restore the website to full operation.
However, he directly denied claims spreading on social media about the leak of documents and databases as well as the hacking of servers and operating systems of the ministry.
Furthermore, he emphasized that the information and images broadcasted in the name of Iran’s Foreign Ministry in cyberspace are fake and baseless.
Hackers Identity Exposed
Earlier on Sunday, an Iranian hacker group known as Ghiam Sarnegouni (Uprising Till Overthrow) claimed responsibility for the attack. They claimed they accessed the ministry’s servers and databases, 210 websites, and leaked 50 TB of data.
According to reports, the hackers are affiliated with the Albania-based Iranian opposition group Mujahideen e Khalq (MEK). On paper, the group is a terrorist organization by the Islamic Republic.
Subsequently, the hackers broadcasted a large cache of documents, identity cards, minutes of meetings as well as phone numbers of ministry employees on the group’s Telegram portal.
Moreover, the documents published contained correspondence between Iranian and European officials on the prison swap deal between Iran and Belgium, including the release of Iranian diplomat Asadollah Assadi and Belgian aid worker Olivier Vandecasteele, respectively.
Israel publicly blames Iran for a cyberattack on a major university last month
The Israel National Cyber Directorate proclaimed that a hacking group affiliated with Iranian intelligence was behind its internet attack last month on the Technion, Israel’s research and education institute.
In a statement, the directorate announced an investigation shows MuddyWater was behind the attack, an Iran-affiliated Ministry of Intelligence and Security.
The directorate added that the group carried out other criminal acts across the world. last year the US and the UK said the group was behind a string of online invasions in Asia, Africa, and North America.
