US Cert Alert - Iranian Cyber Actors Compromise Critical Infrastructure Organizations CISA AA24-290A

The FBI CISA NSA CSE AFP and ASDs ACSC issued a joint cybersecurity advisory warning about Iranian cyber actors targeting critical infrastructure sectors including healthcare government IT engineering and energy. Since October 2023 the actors have used brute force techniques like password spraying and multifactor authentication (MFA) push bombing to compromise accounts and modify MFA registrations for persistent access. They gather credentials and network information from compromised systems likely selling this data to cybercriminals for further malicious use.