Today: 28 October 2025
18 November 2021
1 min read

Iran-backed hackers exploiting Microsoft, Fortinet bugs

The group has highlighted the ongoing malicious cyber activity by an advanced persistent threat (APT) group associated with the government of Iran…reports Asian Lite News

Federal cyber agencies across the US, the UK and Australia have warned that the Iranian government-sponsored hackers are exploiting several vulnerabilities in Microsoft Exchange email server and cyber security company Fortinet to perform malicious activities, which include deploying ransomware.

In an advisory, The US Cybersecurity and Infrastructure Security Agency (CISA) said that they have highlighted the ongoing malicious cyber activity by an advanced persistent threat (APT) group associated with the government of Iran.

“The Federal Bureau of Investigation (FBI) and CISA have observed this Iranian government-sponsored APT exploit Fortinet and Microsoft Exchange ProxyShell vulnerabilities to gain initial access to systems in advance of follow-on operations, which include deploying ransomware,” the CISA said in a statement late on Wednesday.

By breaking into systems through Fortinet vulnerabilities, cybercriminals can “conduct data exfiltration, data encryption, or other malicious activity.”

The CISA, the FBI, the Australian Cyber Security Centre (ACSC), and the UK’s National Cyber Security Centre (NCSC) have released the joint cybersecurity advisory.

“ACSC is also aware this APT group has used the same Microsoft Exchange vulnerability in Australia,” it read.

The Iranian government-sponsored APT group has exploited Fortinet vulnerabilities since at least March 2021 and a Microsoft Exchange ProxyShell vulnerability since at least October 2021.

The APT actors are actively targeting a broad range of victims across multiple US critical infrastructure sectors, including the transportation sector and the healthcare and public health sector, as well as Australian organisations.

ALSO READ: Iran reckons India’s role to help peace and stability is very important

“These Iranian government-sponsored APT actors can leverage this access for follow-on operations, such as data exfiltration or encryption, ransomware, and extortion,” the advisory read.

In April this year, the FBI and CISA issued warnings about the vulnerabilities in Fortinet gear being actively exploited.

Microsoft on Wednesday issued its own warning of six Iranian groups using vulnerabilities in the same pair of products to deploy ransomware.

Previous Story

Dragon’s trap choke Lanka

Next Story

India at UNSC meet calls for inclusive dispensation in Afghanistan

Latest from Arab News

Gazans Struggle to Revive Life

Today, Gaza’s markets seem to awaken from beneath the ruins. Partially destroyed shops opened their doors amid streets littered with debris, while merchants attempt to arrange what remains of their goods on

GAZA AID: MSF raps Israel

Doctors Without Borders (MSF) says Israel Continues to Use Aid as a Weapon of War Against Gaza Strip…reports Asian Lite News Doctors Without Borders (MSF) said that despite the ceasefire agreement, Israel

Qatar Emir Meets Trump

HH the Amir welcomed HE the US President and his accompanying delegation, expressing his pleasure at meeting the President during his stopover in Qatar…reports Asian Lite News HH the Amir Sheikh Tamim

World Court slams Israel

The International Court of Justice says Israel must uphold human rights and ensure humanitarian aid reaches Palestinians, adding moral pressure on Tel Aviv amid Gaza’s worsening crisis….reports Asian Lite News The International

Arab world blasts Israel’s annexation bid

Arab and Muslim nations unite to denounce Israel’s West Bank annexation bills, citing international law and ICJ rulings, as Israel freezes legislation amid global diplomatic pressure. A broad coalition of Arab and
Go toTop

Don't Miss

Miguel Poveda to perform at Spain Pavilion

Miguel Poveda to launch the cultural programme for Spain Pavilion…reports

Global Covid caseload tops 461.4 mn

The global coronavirus caseload has topped 461.4 million, while the