If you're holding important data, Iran is probably trying spearphish it

US and UK national security agencies issued a joint advisory warning of ongoing IRGC-linked spearphishing campaigns that impersonate known contacts or trusted services to harvest credentials from high-value targets; attackers use social engineering to obtain passwords, MFA codes, or approvals and then search compromised accounts for material useful for information operations. The advisory provides indicators of compromise, malicious domains, and standard defensive recommendations, and the report also notes a DOJ indictment alleging Iranian operatives used similar tactics against the Trump 2024 campaign.