Iranian APT Group Targets IP Cameras, Extends Attacks Beyond Israel

An Iranian APT known as Emennet Pasargad (Cotton Sandstorm) has broadened its operations beyond Israel and the U.S., using a front company (ASA) and commercial hosting to scan and harvest data from IP cameras, probe election sites, and target organizations in Europe and the Middle East; U.S. and Israeli agencies issued a joint advisory describing these intrusions and recommending vendor vetting, patching, network segmentation/DMZs, monitoring VPN authentications, and other defensive measures.