Iranian-based cyber actors compromising critical infrastructure networks

"On "17/10/2024", the Australian Cyber Security Centre (ACSC) issued an update regarding "Iranian-based cyber actors compromising critical infrastructure networks".

These Iranian-based cyber actors are using brute force attacks, such as password spraying and multi-factor authentication (MFA) push bombing, to compromise user accounts and gain access to organisations' networks.

The ACSC has released a joint advisory in collaboration with international partners to highlight the tactics, techniques, and procedures and indicators of compromise used by these malicious actors.