The U.S. sanctioned several Iranian nationals on Monday for cyberattacks on critical infrastructure just days after reports emerged of a cyber intrusion on a small power plant in the United Kingdom. <\/p>\n
Treasury Secretary Scott Bessent unveiled<\/a> a slate of new sanctions and measures designed to pressure the government of Iran as the U.S. attempts to reopen the critical Strait of Hormuz. <\/p>\n Among those sanctioned were at least six men accused of being part of a hacking operation housed within Iran\u2019s Ministry of Intelligence and Security (MOIS). Four of the men were indicted last week<\/a> for allegedly breaching employee email accounts connected to the Department of Labor, the Federal Energy Regulatory Commission and multiple organizations within the United Nations. <\/p>\n The Treasury Department said the men \u2014 Keyvan Fayyaz Ghareh Blagh, Saber Shahbazi Balujeh, Mohammad Reza Kadkhoda\u2019i, Mojtaba Ghal\u2019eh-Kuhi and two others who had previously been sanctioned \u2014 are part of a team that since 2023 has conducted cyberattacks on behalf of Iran\u2019s MOIS and \u201cis responsible for extensive compromises of U.S. critical infrastructure and financially motivated cyber theft.\u201d <\/p>\n \u201cThe MOIS directs several networks of cyber threat actors involved in cyber espionage in support of Iran\u2019s political goals, which include harming American civilians,\u201d the agency said.\u00a0 <\/p>\n According to Treasury officials, Blagh, Balujeh and Kadkhoda\u2019i conducted the majority of the group\u2019s initial intrusions and data thefts. <\/p>\n The group targeted critical infrastructure sectors including energy companies, defense contractors, healthcare institutions, information technology companies, and financial institutions.\u00a0 <\/p>\n \u201cAdditionally, in summer 2024, they compromised multiple local, state, and federal government offices across the United States,\u201d the Treasury Department added. \u201cThe members of this group are also heavily motivated by personal enrichment and greed, leading some members to prioritize their own profits over operations that benefit the MOIS.\u201d\u00a0 <\/p>\n Several members of the group have also allegedly targeted Iranian companies or stolen cryptocurrency from local coin holders.\u00a0 <\/p>\n Iranian threat actors have been accused of several hacking campaigns since the U.S. began conducting airstrikes against the country in February, including recent attacks targeting water systems in at least 12 states<\/a>. Tehran also took credit for cyberattacks on a prominent medical device company<\/a> as well as the personal email account of the FBI director<\/a>.\u00a0 <\/p>\n Iran\u2019s hackers have also hit U.S. allies, and were reportedly able to shut down a small British power plant for four days. No one lost power and the attack did not affect the overall power grid, the Telegraph reported, the Telegraph reported<\/a>.\u00a0 <\/p>\n The incident reignited concerns that Iranian actors have the capability to breach critical infrastructure organizations responsible for water, power and other utilities.\u00a0 <\/p>\n U.K. Energy Minister Michael Shanks said<\/a> in social media posts that the government has briefed energy CEOs and shared further advice with companies on the steps they should take to stay secure.\u00a0 <\/p>\n