Mysterious Hacker Group Suspected in July Cyberattack on Iranian Trains

An investigation by a cybersecurity company has concluded that a little-known group opposed to the Iranian government was most likely behind the hack that caused chaos on the railway system

TEL AVIV — When a cyberattack on Iran’s railroad system last month caused widespread chaos with hundreds of trains delayed or canceled, fingers naturally pointed at Israel, which has been locked in a long-running shadow war with Tehran.

But a new investigation by an Israeli-American cybersecurity company, Check Point Software Technologies, concluded that a mysterious group opposed to the Iranian government was most likely behind the hack. That is in contrast to many previous cyberattacks, which were attributed to state entities. The group is known as Indra, named after the god of war in Hindu mythology.

“We have seen many cyberattacks connected with what are believed to be professional intelligence or military units,” said Itay Cohen, a senior researcher at Check Point. “But here, it seems to be something else entirely.”

The company’s report, which was reviewed by The New York Times, said the attack was a cautionary tale: An opposition group without the budget, personnel or abilities of a government could still inflict a good deal of damage.

Source
https://www.nytimes.com/2021/08/14/world/middleeast/iran-trains-cyberattack.html