UK and US Issues Warning of Increased Risks of State-Sponsored Phishing Attacks from Iran

The UK's National Cyber Security Centre (NCSC) and the US Cybersecurity and Infrastructure Security Agency (CISA) have released a joint alert concerning a series of cyber-attacks orchestrated by Iranian state-sponsored actors. The campaign involves targeted phishing attacks aimed at organisations in multiple sectors, including academia, defence, and government.

These attacks are characterised by sophisticated social engineering techniques, designed to manipulate individuals into revealing sensitive data or credentials. The advisory identifies that the cyber actors exploit publicly available information and leverage spear-phishing emails to compromise systems.

The NCSC and CISA have recommended a series of measures to bolster cybersecurity defences, including implementing multi-factor authentication (MFA), using strong passwords, and conducting regular employee training on recognising phishing attempts. Organisations are urged to review their security policies and report any suspicious activity.

For further details, please refer to the official NCSC announcement.

If you are looking for guidance on improving your security posture or ensuring that you are adhering to Security best practice from the NCSC, talk to our team of security specialists or learn more here >>