Microsoft: Iran Accelerates Its Cyber Influence Operations Worldwide

The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)
The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)
TT
20

Microsoft: Iran Accelerates Its Cyber Influence Operations Worldwide

The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)
The logo of American Microsoft on its pavilion at a world tech fair in Barcelona last year. (AFP)

Microsoft warned that Iran is accelerating its cyber-enabled influence operations to go in tandem with its geopolitical goals worldwide.

“Iran continues to be a significant threat actor, and it is now supplementing its traditional cyberattacks with a new playbook, leveraging cyber-enabled influence operations (IO) to achieve its geopolitical aims,” a report published by the company on Tuesday revealed.

Microsoft has detected these efforts rapidly accelerating since June 2022.

Microsoft said it attributed 24 unique cyber-enabled influence operations to the Iranian government last year compared to just seven in 2021.

The report added that most of Iran’s cyber-enabled influence operations are being run by Emennet Pasargad – which is sanctioned by the US Treasury Department for attempts to undermine the integrity of the 2020 US Presidential Elections.

Though Iran’s techniques may have changed, its targets have not. These operations remain focused on Israel, prominent Iranian opposition figures and groups, and the Gulf countries, according to Microsoft.

“Iran directed nearly a quarter (23%) of its cyber operations against Israel between October of 2022 and March of 2023, with the United States, United Arab Emirates, and Saudi Arabia also bearing the brunt of these efforts.”

The goals of its cyber-enabled IO have included seeking to bolster Palestinian groups that are allied to Iran, fomenting unrest in Bahrain, and sowing panic and fear among Israeli citizens.

“Iran has also adopted cyber-enabled IO to undercut the momentum of nationwide protests by leaking information that aims to embarrass prominent regime opposition figures.”

Microsoft added that most of these operations have a predictable playbook, in which Iran uses a cyber persona to publicize and exaggerate a low-sophistication cyberattack, using the language of the target audience.

“New Iranian influence techniques include their use of SMS messaging and victim impersonation to enhance the effectiveness of their amplification”, the report added.



NKorea's Kim Watches Missile Test-firings from Country's 1st Destroyer

In this photo provided by the North Korean government, North Korean leader Kim Jong Un, front right, and his daughter visit to observe the test-firings, conducted on April 28 and April 29, 2025, of missiles from a newly launched destroyer "Choe Hyon" at an undisclosed place in North Korea. (Korean Central News Agency/Korea News Service via AP)
In this photo provided by the North Korean government, North Korean leader Kim Jong Un, front right, and his daughter visit to observe the test-firings, conducted on April 28 and April 29, 2025, of missiles from a newly launched destroyer "Choe Hyon" at an undisclosed place in North Korea. (Korean Central News Agency/Korea News Service via AP)
TT
20

NKorea's Kim Watches Missile Test-firings from Country's 1st Destroyer

In this photo provided by the North Korean government, North Korean leader Kim Jong Un, front right, and his daughter visit to observe the test-firings, conducted on April 28 and April 29, 2025, of missiles from a newly launched destroyer "Choe Hyon" at an undisclosed place in North Korea. (Korean Central News Agency/Korea News Service via AP)
In this photo provided by the North Korean government, North Korean leader Kim Jong Un, front right, and his daughter visit to observe the test-firings, conducted on April 28 and April 29, 2025, of missiles from a newly launched destroyer "Choe Hyon" at an undisclosed place in North Korea. (Korean Central News Agency/Korea News Service via AP)

North Korea said Wednesday leader Kim Jong Un observed the test-firings of missiles from a recently launched destroyer — the first such warship for the North — and called for accelerating efforts to boost his navy's nuclear attack capabilities.
North Korea last week unveiled the 5,000-ton destroyer equipped with what it called the most powerful weapons systems built for a navy vessel. During Friday's launching ceremony at the western port of Nampo, Kim called the ship's construction “a breakthrough” in modernizing North Korea's naval forces, The Associated Press reported.
Outside experts say it's North Korea's first destroyer and that it was likely built with Russian assistance. They say North Korea's naval forces lag behind South Korea's but still view the destroyer as a serious security threat as it could bolster North Korea's attack and defense capabilities.
The official Korean Central News Agency said Wednesday that Kim watched the tests of the destroyer's supersonic and strategic cruise missiles, anti-aircraft missile, automatic guns and electronic jamming guns earlier this week.
He appreciated the ship's combination of powerful strike weapons and conventional defenses and set tasks to speed the nuclear-arming of his navy, the report said.
During the ship's launching ceremony, Kim said the destroyer will be deployed early next year. He said the acquisition of a nuclear-powered submarine would be his next big step in strengthening his navy. He underscored the need to beef up North Korea's deterrence capability to cope with what he called escalating US-led hostilities targeting the North.
An analysis of photos of the warship shows that its anti-air radar system is likely from Russia, said Lee Illwoo, an expert with the Korea Defense Network in South Korea. He said the warship's engine system and some of its anti-air weapons systems also likely came from Russia.
North Korea and Russia have been sharply expanding military and other cooperation in recent years, with the North supplying troops and conventional weapons to support Russia's war efforts against Ukraine. The US, South Korea and their partners worry Russia will likely in return provide North Korea with high-tech weapons technologies that can enhance its nuclear program as well as shipping other military and economic assistance.
South Korea’s military said Wednesday that South Korean and US intelligence authorities were closely monitoring North Korean warship development. South Korea’s spy agency separately told lawmakers that North Korea won't likely be able to deploy a nuclear-powered submarine anytime soon without Russian support.
In March, North Korea unveiled a nuclear-powered submarine under construction. Many civilian experts said at the time that North Korea may have received Russian technological assistance to build a nuclear reactor to be used in the submarine.
Lee said the deployment of a warship with an advanced radar system off North Korea's west coast could sharply bolster its air defense capabilities for Pyongyang, the capital. Lee said South Korea, which has 12 destroyers, still vastly outpaces North Korea's naval forces. But he said the North Korean destroyer, which can carry about 80 missiles, can still pose a big threat, as South Korea's navy hasn't likely braced for such an enemy warship.