The UK's National Cyber \u200b\u200bSecurity Center (NCSC) warns that two government-linked hacking groups from Russia and Iran are trying to break the correspondence and accounts of well-known people in the British environment: politicians, journalists and think tanks through malicious links from people posing as leading.
Both groups have been active for several years, however, due to the war in Ukraine, they have significantly increased their activities in the UK, USA and other NATO countries..
Experts warn that hackers are not aiming to extort money, but to steal confidential information, or make public correspondence on the network in order to discredit high-ranking officials..
Paul Chichester, COO of NCSC, said hackers seek to gain trust in the facility by impersonating someone who can contact it.. In particular, they can impersonate journalists, prompting the target of the attack to open a malicious link sent in an email or in an online environment..
Once they take control of an account, hackers sometimes use it to lure others in because emails from a familiar person in a real mailbox are more trustworthy..
The NCSC explains that the Russian and Iranian factions are each conducting their own campaigns, but the center decided to combine the warnings about them into one, as they use similar techniques and prey on a similar range of victims..
Over the past year, hacker attacks have increased. In particular, Russian hackers from the Killnet group close to the leadership of the Russian Federation attacked the official website of the Israeli Parliament.. In the fall of 2022, Russian hackers attacked the websites of American airports and also disabled the government websites of several states.
In August, after the Latvian Saeima recognized Russia as a terrorism-supporting state, the Saeima website was also subjected to cyberattacks by the Killnet group.. Attacks have also been experienced by Japanese government resources due to support for Ukraine.