Security News > 2022 > July > Latest Cyberattack Against Iran Part of Ongoing Campaign
Malware used in a crippling cyberattacks against an Iranian steel plants last week is connected to an attack that shut down the country's rail system last year.
The overlaps in the code, combined with contextual clues and even recycled jokes, indicate that the same threat actor, dubbed Indra, is behind the attacks impacting Iran's infrastructure.
"With timely action and vigilance the attack failed and no damage was done to the production line," the company said in a statement.
Last year - on the morning of Friday, July 9 - Iran's national railway system came under attack.
An executable discovered in last week's attack is a variant of malware identified as meteor, a wiper strain believed used in last year's attack against Iran's railway system.
The investigation into last Monday's attacks is still ongoing.