Episode 173: Iran’s Cyber Payback for Soleimani Killing may have a Long Fuse




The Security Ledger Podcasts show

Summary: <br> As it weighs further response to the assassination of General Qasem Soleimani, Iran is almost certain to consider the use of cyber attacks. We talk with Levi Gundert at the firm Recorded Future about what cyber “payback” from Tehran might look like. <br> <br> <br> <br> <br> <br> <br> <br> When <a href="https://www.washingtonpost.com/world/national-security/iran-launches-ballistic-missiles-at-bases-housing-us-military-personnel-in-iraq/2020/01/07/12853cae-3197-11ea-9313-6cba89b1b9fb_story.html">missiles from Iran landed near U.S. military bases in Iraq,</a> the world assumed that it was an escalation of tensions between Iran and the U.S. in response to the January 3rd <a rel="noreferrer noopener" href="https://edition.cnn.com/2020/01/02/opinions/killing-of-irans-general-soleimani-is-hugely-significant-bergen/index.html" target="_blank">U.S drone assassination of General Qasem Soleimani,</a> a high-ranking member of the Iranian government and the architect of the country’s Middle East policy.<br> <br> <br> <br> But fears of a shooting war between the U.S. and Iran have eased in the days following the Iranian missile launch, which caused no U.S. casualties and little damage and which were followed by mollifying comments from both the Iranian and U.S. leadership. <br> <br> <br> <br> Disaster averted? Not so fast. <br> <br> <br> <br> Levi Gundert, Recorded Future<br> <br> <br> <br> Disaster averted? Not so fast, say Middle East experts. “Killing Soleimani crossed a significant threshold in the US-Iran conflict,” Kiersten Todt, managing director of the Cyber Readiness Institute <a rel="noreferrer noopener" href="https://www.cnn.com/2020/01/05/tech/iran-cyberattacks-retaliation/index.html" target="_blank">told CNN</a>.  “Iranians will certainly try to retaliate — definitely in the region and they will also look at options in our homeland. Of the options available to them, cyber is most compelling.”<br> <br> <br> <br> <a href="https://securityledger.com/2019/02/government-private-sector-unprepared-for-21st-century-cyber-warfare/" target="_blank" rel="noreferrer noopener">Government, Private Sector Unprepared for 21st Century Cyber Warfare</a><br> <br> <br> <br> With Iran’s kinetic response mostly symbolic, speculation is now focused on the cyber theater, where Iran’s government has used hacking to advance both domestic and geopolitical objectives before. In recent memory, for example, the country<a rel="noreferrer noopener" href="https://securityledger.com/2018/03/iran-taps-chafer-apt-group-amid-civil-aviation-crisis/" target="_blank"> tapped the Chafer hacking group to target aviation repair and maintenance firms </a>in 2018 in an apparent effort to obtain information needed to shore up the safety of that country’s fleet of domestic aircraft, according to research by the firm Symantec.<br> <br> <br> <br> Those concerns prompted the U.S. Department of Homeland Security to <a href="https://www.us-cert.gov/ncas/alerts/aa20-006a">issue a warning to private sector firms</a> to prepare for the worst. But what might “the worst” look like? <br> <br> <br> <br> <a href="https://securityledger.com/2018/01/episode-80-apt-three-ways/" target="_blank" rel="noreferrer noopener">Episode 80: APT Three Ways</a><br> <br> <br> <br> A well-developed Offensive Cyber Program<br> <br> <br> <br> Iran has <a rel="noreferrer noopener" href="https://www.recordedfuture.com/iran-hacker-hierarchy/" target="_blank">a well-developed offensive cyber program </a>and has been linked to attacks against public and private interests in Saudi Arabia, the United States and Europe, according to experts. The country already has successfully executed several known major cyber attacks against the United States, with two notable ones occurring in <a href="https://www.nytimes."></a>