Microsoft: Iran Accelerates Its Cyber Influence Operations Worldwide

The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)
The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)
TT
20

Microsoft: Iran Accelerates Its Cyber Influence Operations Worldwide

The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)
The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)

Microsoft warned that Iran is accelerating its cyber-enabled influence operations to go in tandem with its geopolitical goals worldwide.

“Iran continues to be a significant threat actor, and it is now supplementing its traditional cyberattacks with a new playbook, leveraging cyber-enabled influence operations (IO) to achieve its geopolitical aims,” a report published by the company on Tuesday revealed.

Microsoft has detected these efforts rapidly accelerating since June 2022.

Microsoft said it attributed 24 unique cyber-enabled influence operations to the Iranian government last year compared to just seven in 2021.

The report added that most of Iran’s cyber-enabled influence operations are being run by Emennet Pasargad – which is sanctioned by the US Treasury Department for attempts to undermine the integrity of the 2020 US Presidential Elections.

Though Iran’s techniques may have changed, its targets have not. These operations remain focused on Israel, prominent Iranian opposition figures and groups, and the Gulf countries, according to Microsoft.

“Iran directed nearly a quarter (23%) of its cyber operations against Israel between October of 2022 and March of 2023, with the United States, United Arab Emirates, and Saudi Arabia also bearing the brunt of these efforts.”

The goals of its cyber-enabled IO have included seeking to bolster Palestinian groups that are allied to Iran, fomenting unrest in Bahrain, and sowing panic and fear among Israeli citizens.

“Iran has also adopted cyber-enabled IO to undercut the momentum of nationwide protests by leaking information that aims to embarrass prominent regime opposition figures.”

Microsoft added that most of these operations have a predictable playbook, in which Iran uses a cyber persona to publicize and exaggerate a low-sophistication cyberattack, using the language of the target audience.

“New Iranian influence techniques include their use of SMS messaging and victim impersonation to enhance the effectiveness of their amplification”, the report added.



Iran Threats in UK 'Significantly Increased', Says Intel Watchdog

The parliamentary committee blamed Iran for at least 15 attempts at murder or kidnap inside the UK since 2022 - AFP
The parliamentary committee blamed Iran for at least 15 attempts at murder or kidnap inside the UK since 2022 - AFP
TT
20

Iran Threats in UK 'Significantly Increased', Says Intel Watchdog

The parliamentary committee blamed Iran for at least 15 attempts at murder or kidnap inside the UK since 2022 - AFP
The parliamentary committee blamed Iran for at least 15 attempts at murder or kidnap inside the UK since 2022 - AFP

A UK parliamentary committee on Thursday blamed Iran for at least 15 attempts to kill or kidnap British-based individuals since 2022, saying the threat from Iran had "significantly increased".

London's response has been too focused on "crisis management", said parliament's intelligence and security committee, with concerns over Iran's nuclear program dominating their attention too much.

Tehran swiftly issued a "categorical rejection of the unfounded, politically motivated and hostile allegations".

The committee's claims were "baseless, irresponsible, and reflective of a broader pattern of distortion intended to malign Iran's legitimate regional and national interests", said its London embassy, AFP reported.

The report comes after growing alarm in Britain at alleged Iranian targeting of dissidents, media organizations and journalists in the UK, including accusations of physical attacks.

Iran in March became the first country to be placed on an enhanced tier of the Foreign Influence Registration Scheme, which aims to boost Britain's national security against covert foreign influences.

It requires all persons working inside the country for Iran, its intelligence services or the Revolutionary Guard to register on a new list or face jail.

"Iran poses a wide-ranging, persistent and unpredictable threat to the UK, UK nationals, and UK interests," Kevan Jones, chairman of the watchdog committee, said in the report's conclusions.

"Iran has a high appetite for risk when conducting offensive activity and its intelligence services are ferociously well-resourced with significant areas of asymmetric strength."

Jones said it bolstered this through proxy groups, "including criminal networks, militant and terrorist organisations, and private cyber actors" to allow for deniability.

His committee's report said that while Iran's UK activity "appears to be less strategic and on a smaller scale than Russia and China", it "should not be underestimated".

The physical threat posed had "significantly increased" in pace and volume, and was "focused acutely on dissidents and other opponents of the regime" as well as Jewish and Israeli interests in the UK, it said.

"The Iranian Intelligence Services have shown that they are willing and able -- often through third-party agents -- to attempt assassination within the UK, and kidnap from the UK," the report said.

"There have been at least 15 attempts at murder or kidnap against British nationals or UK-based individuals since the beginning of 2022."

Similarly, security minister Dan Jarvis said in March Britain's MI5 domestic intelligence service had tallied 20 Iran-backed plots "presenting potentially lethal threats to British citizens and UK residents".

The watchdog committee took evidence for two years from August 2021 for its report, a period which saw Tehran implicated in a plot to kill two London-based Iran International television anchors.

In March last year one of the Persian-language outlet's journalists was stabbed outside his London home.

Two Romanian men have been charged in relation to the attack and face extradition to the UK to stand trial.

The counter-terrorism unit of London's Metropolitan Police led the investigation. Iran's charge d'affaires in the UK has said that the Tehran authorities "deny any link" to the incident.