Russian hackers piggy-backed on an Iranian cyber-espionage operation to attack government and industry organizations in dozens of countries while masquerading as attackers from the Islamic Republic, Reuters reports, citing on British and U.S. officials who said it on Monday.
The Russian group, known as “Turla” and accused by Estonian and Czech authorities of operating on behalf of Federal Security Service of Russia (FSB), has used Iranian tools and computer infrastructure to order to hack into organizations in at least 20 different countries over the last 18 months, British security officials stated.
The hacking campaign, the extent of which has not been previously revealed, was most active in the Middle East but also targeted organizations in Britain, officials claimed.
Paul Chichester, a senior official at Britain’s GCHQ intelligence agency, said the operation shows state-backed hackers are working in a “very crowded space” and developing new attacks and methods to better cover their tracks.
“We want to send a clear message that even when cyber actors seek to mask their identity, our capabilities will ultimately identify them,” said Chichester, who serves as the NCSC’s director of operations.
Officials in Russia and Iran did not immediately respond to requests for comment sent on Sunday. Moscow and Tehran have both repeatedly denied Western allegations over hacking.