Iranian Hackers Blamed for Breach of Los Angeles Transit System

["Security researchers have attributed a March breach of the Los Angeles County Metropolitan Transportation Authority (LACMTA) to Iranian-backed hackers. According to a report by Israeli startup Gambit Security, the hackers work for Iran's Ministry of Intelligence and State Security (MOIS).", "The breach was initially claimed by a hacktivist group calling itself Ababil of Minab, which said it had stolen and then deleted data from the LACMTA's systems. The group's name appears to be a reference to a U.S.

air strike on an Iranian school in the city of Minab that killed over 175 people, mostly children. However, Gambit Security disputes the group's claims of being a standalone hacktivist crew.", "Gambit Security's claims are based on forensic evidence that ties Ababil of Minab to a previous Iran-linked campaign, as well as activity attributed to the MOIS by the Israel National Cyber Directorate. The company investigated other attacks against companies in Israel, Saudi Arabia, and Turkey, and found connections between these attacks and Ababil of Minab.", "If Gambit's assessment is correct, Ababil of Minab would be the latest in a series of fake hacktivist groups working for the Iranian government.

This pattern is similar to that of Handala, a group that earlier this year hacked U.S. medical tech giant Stryker, wiping thousands of company systems and employee devices. The FBI subsequently seized two Handala websites, and the U.S.

Justice Department accused Iran's government of being behind the hacktivist group and its attacks.", 'The incident highlights the increasing activities of Iranian-linked hackers, particularly after the U.S. and Israel began bombing Iran earlier this year. In April, a coalition of U.S.

agencies warned that Iranian hackers were targeting American critical infrastructure.']