Iran cyberattack against med tech firm 'just the beginning'

"Cyber and terrorism are the two levers that I believe Iran will pull now that their navy is decimated. What we saw against Stryker - it's just the beginning. The Stryker hack marks the first time that Iran executed a successful full-blown disruptive attack against a major US corporation, especially against a company that plays a critical role in the healthcare supply chain."

"It's a very clear signal that Iran sends about its capabilities, but even more about its intentions and courage to execute such operations. Iran is a less predictable cyber-adversary than nations like China and Russia. It has been conducting cyber-espionage, phishing, and disinformation campaigns for more than 15 years."

"The nation's offensive cyber teams have also developed custom malware that can remotely control water and fuel management systems. But so far, most of their cyberattacks to date have been opportunistic - such as those in 2023 that used default passwords to break into internet-accessible programmable logic controllers used in multiple US water systems."

Security analysts warn that Iran will intensify cyber operations and terrorism as its military capabilities weaken. The recent cyberattack on Stryker, a medical technology company, represents a significant escalation—the first destructive cyberattack targeting a major US corporation during the Iran conflict. The attack caused global network outages, with ordering and shipping systems remaining offline a week later. Iran has conducted cyber-espionage, phishing, and disinformation campaigns for over 15 years, demonstrating capabilities in custom malware development and hack-and-leak operations. However, most Iranian cyberattacks have been opportunistic, exploiting default passwords and basic vulnerabilities. The Stryker incident signals Iran's willingness to execute sophisticated operations against critical infrastructure, particularly healthcare supply chains.

Read at Theregister