Accenture outlines growing Iran threat in global cybersecurity report
24 August 2018 Consultancy-me.com 3 min. read
Global professional services giant Accenture has pointed the finger at Iran as a growing threat to international cybersecurity, with a recent report further outlining the rise in ransomware originating in the country.
Accenture's mid-year 'Cyber Threatscape Report', compiled by threat intelligence analysts from Accenture Security iDefense practice, has detailed the growing activity of nation-state-sponsored cyberattacks emanating from Iran, contending that the Iranian government and hacktivists located in the country 'pose a disruptive or destructive cyber threat' against the US, Europe, and the Middle East.
Cutting directly to the point, the firm states that the continued development of and expectations for growth in Iran's cyber-espionage programmes and influence operations which it described in last year's corresponding report had now been 'realised', and are likely to continue in an bid to exert political and strategic influence, amounting to a threat described as a 'growing force to be reckoned with'.
And while the report suggests that, based on current Iranian policy, a direct cyberattack on the US or its European counterparts may not eventuate in the near future – despite increasingly rising tensions – the author's suggest that Iran may still well take a more aggressive posture toward regional foes such as Saudi Arabia, the UAE, Bahrain and Israel as retribution for their support of the US reneging on the joint Iran nuclear agreement.
"The convergence of information technology (IT) and operational technology (OT) is opening doors to adversaries to disrupt operations, deploy crypto-mining malware, or to conduct deep-seated espionage operations," the report states, adding that the rise in activity is extending beyond Iran and evolving in sophistication, with an increase in origin identification and occasional arrests doing little to curtail the threat.
The report further notes that threat actors globally are broadening their attack scope beyond direct spear-phishing campaigns and vulnerability exploitation to target weak links in far-removed supply chain partners by attacking Internet of Things (IoT) and Industrial Internet of Things (IIoT) technologies – particularly in the in the oil and natural gas industry – which were not originally designed with cyber-defence in mind.
Further to the geopolitical underpinnings of the Iranian cyber-espionage programmes alleged by the report was a concurrent rise in Iran-attributed ransomware (developed to compromise and encrypt both Windows operating systems and Android mobile devices), indicating, according to the analysts, that "Iranian cybercrime actors are likely to be financially motivated to target global organisations by using ransomware and cryptocurrency miners for financial gain."
The report states in conclusion; "Iran will likely focus much of its attention on other Middle Eastern nations; however, Iran-based threat actors have the potential to pivot their attacks to other nations, consumers, or businesses. Organisations, businesses, and governments should not ignore the Iran-based threat; they should proactively build resilience against it, especially against Android-based malware and ransomware, as Iran-based threat actors will likely use these as their cyber weapons of choice."
Cyber Security consulting firms Cyber Security consulting services
UAE Data Protection Law: The requirements and ensuring compliance On 2 January 2022, the United Arab Emirates (UAE) launched its Federal Personal Data Protection (PDP) Law – a new law which provides a legal framework to ensure the security and privacy of personal i
Homegrown cyber firm CPX partners with consulting arm of KPMG Within six months of its launch, UAE-focused cybersecurity services company CPX has inked a partnership with KPMG, one of the region's leading cybersecurity consultancies.
UAE's Cyber Security Council selects external partners The UAE's Cyber Security Council has over the past weeks signed multiple collaboration agreements with external service providers.
Accenture news
CEOs are being overwhelmed by polycrisis, says Accenture Life of CEOs is more complex than ever before, with the current 'polycrisis' sweeping through boardrooms posing them with an unprecedented number of challenges.
Middle East leaders investing in 'future-ready' operating models One third of business leaders in the Middle East believe their firms will become 'future-ready' by 2025, as they invest in innovative operating models backed by digital technologies.
Red Sea Project selects Accenture for visitor experience technology The Red Sea Development Company – which oversees one of the largest tourism construction projects in the world – has selected Accenture as its partner for the Smart Destination Programme.
Iran consulting news
Iranian group NikKhah Consulting to establish new office in Qatar Iran-headquartered player NikKhah Consulting has announced plans to enter Qatar over the course of this year, with the aim of helping Qatari organisations professionalise and international clients wi
NikKhah service helps startups with setup in Dubai and growth International professional services group NikKhah has launched a new offering that helps startups with setting up and building out their business in Dubai.
NikKhah Consulting launches operations in Dubai and Istanbul Iran-origin business NikKhah Consulting has launched two new Middle East offices: in Dubai and Istanbul.