Cyberattack on Railway Company in Iran

December 12, 2024

INCIDENT

Hacker group APT Iran has infiltrated the cyber infrastructure of Iran's Railway Company in the latest such attack on government networks, with documents revealing mandates for female employees to wear Islamic attire.

The Cyberban News Agency confirmed the hack from the anti-government group though the agency downplayed the extent of the breach, dismissing reports of an attack on the main railway infrastructure as propaganda.

APT Iran claimed the breach aimed to alert railway officials about security lapses after previous breaches of the IranCell Communication Services Company and State Organization for Registration of Deeds and Properties.

Among the leaked documents is a directive signed by Mohsen Tabatabaei Atabak, the Director General of Planning and Monitoring of Passenger Services, outlining guidelines for employee conduct, including adherence to mandatory hijab for female staff.

Incident Date

March 24, 2024

Location

Iran

Estimated Cost


No cost values disclosed.

Type of Malware

No Malware identified

Threat Source

No threat source identified