Meta Removes Accounts Linked to Iranian Hackers Targeting US Election

Meta Platforms announced on Friday that it has blocked a series of fake WhatsApp accounts linked to an Iranian hacker group, APT42, which has been implicated in targeting staffers associated with U.S. presidential election campaigns. The hackers posed as tech support representatives from major companies like Google and Microsoft, attempting to deceive high-profile individuals, including political figures in the U.S., U.K., Israel, and Iran. The scheme was uncovered after WhatsApp users reported suspicious messages, prompting Meta to take action. The company stated that while it found no evidence of successful hacks on the targeted accounts, it opted to share its findings with law enforcement and other tech firms as a precaution. APT42, also known as UNC788 and Mint Sandstorm, has a history of phishing campaigns aimed at stealing online credentials, previously targeting military personnel, dissidents, and human rights activists in the Middle East. Google has linked this group to Iran’s Revolutionary Guard, highlighting its ongoing cyber activities. The U.S. government has confirmed that Iranian attempts to hack both Republican and Democratic presidential campaigns are part of a broader strategy to influence the upcoming election. Officials from the Office of the Director of National Intelligence and the FBI noted an increase in aggressive Iranian cyber operations and influence campaigns aimed at sowing discord among the American public. Meta's findings underscore the ongoing threat posed by foreign actors in the digital landscape, particularly as the 2024 presidential election approaches. The company emphasized the importance of vigilance against such tactics, which include social engineering methods to extract sensitive information from targets.