US Justice Department charges Iranian hackers over Trump campaign cyberattack

US Justice Department charges Iranian hackers over Trump campaign cyberattack
28 Sep 2024

The US Department of Justice (DOJ) has charged three Iranian nationals, for their supposed role in a cyberattack on Donald Trump's presidential campaign.

The accused—Masoud Jalili, Seyyed Ali Aghamiri, and Yasar (Yaser) Balaghi—are thought to have connections with Iran's Islamic Revolutionary Guard Corps (IRGC).

They allegedly used social engineering and spear phishing tricks, to break into the accounts of campaign officials.

Hackers stole and leaked confidential campaign documents
Information leak

The hackers are accused of swiping confidential campaign documents and emails from the hacked accounts, which they later leaked to the media.

As the indictment outlines, the US connects these folks to an Iranian internet service provider, Respina Networks.

This company is said to have given them "unrestricted" internet access beyond Iran's borders.

VPN and fake domains used to mislead victims
Deceptive tactics

The hackers are also accused of using a commercial VPN to create several fake domains like "tinyurl.ink" and "mailer-daemon.online," which they used to dupe victims.

While the indictment doesn't name the specific presidential candidate who was targeted, the Trump campaign confirmed last month that it had been hacked.

The media outlets that got the stolen documents didn't report on them, but independent journalist Ken Klippenstein published a dossier on vice presidential candidate JD Vance, that was allegedly sent by hackers.

US charges hackers with wire fraud and supporting terrorism
Serious charges

The US has slapped charges on the three hackers for wire fraud, aiding a terrorist group, and plotting to snatch info from protected computers.

"These hack-and-leak efforts by Iran are a direct assault on the integrity of our democratic processes," said Matthew G. Olsen, the Assistant Attorney General of the Justice Department's National Security Division.

The US Treasury Department is even offering a reward of up to $10 million for info on these hacking suspects.

Hacking campaign aimed at influencing elections
Long-term operation

The hacking spree targeting Trump's presidential campaign is reportedly part of a four-year operation by the accused.

The indictment hints that this operation was partially kickstarted in retaliation for the 2020 killing of Iranian General Qasem Soleimani by the Trump administration.

At a press conference on Friday, US Attorney General Merrick Garland noted that the Iranian hacking campaign was partly aimed at influencing the 2024 presidential election.