Iran Games Google’s 2FA in Attacks on EFF, Others

Citizen Lab reports that actors believed to be linked to the Iranian government are running a targeted campaign to defeat Google’s two-factor authentication and take over email accounts. The operation uses customized phishing pages that capture passwords and real-time one-time codes, tailored phishing emails, coordinated phone calls with background knowledge of targets, and bespoke malware; reviewers link artifacts (WHOIS and spoofed domains) to previous Iran-associated APT activity.