Unique Iran-Based Threats Target Defense and Healthcare

The Department of Health and Human Services’ (DHHS) Health Sector Cybersecurity Coordinating Center released a security brief in early November outlining how Tehran-backed actors have targeted the defense, healthcare and other sectors.

One incident involved a campaign by a threat group dubbed Tortoiseshell. The group hacked Facebook users by posing as recruiters for medicine, journalism and other industries. Their efforts duped American and European victims into downloading malware-infected files. Other scams tricked targets into giving up credentials on imposter sites. …

american campaign center cybersecurity defense department department of health and human services facebook files hacked health healthcare human incident iran journalism malware medicine november scams sector security services target threat threat group threats tortoiseshell