Iranian Cyber Actor s Brute Force and Credential Access Activity Compromise Critical Infrastructure Organizations

A joint Cybersecurity Advisory has been released by several leading agencies, including the FBI, CISA, NSA, and their international partners, warning of Iranian cyber actors targeting critical infrastructure sectors. These actors have been using techniques like brute force attacks and multi-factor authentication (MFA) ‘push bombing’ to gain access to sensitive networks. Since October 2023, they’ve compromised organizations in sectors such as healthcare, government, and energy, obtaining valuable credentials. This stolen information is likely being sold to cybercriminals, raising the stakes for network defenders to stay vigilant.