U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

The U.S. Treasury (OFAC) sanctioned two Iranian front companies and four individuals linked to the IRGC-CEC for multi-year cyber operations (spear-phishing and malware) targeting U.S. government and private-sector entities; the DOJ unsealed indictments and the State Department offered up to $10M for information. The campaign, attributed to MASN/Tortoiseshell and Dadeh Afzar Arman, allegedly compromised over 200,000 employee accounts and involved procurement and maintenance of infrastructure used in the intrusions.