Your Persistent Friend: The Untold History of Iran’s Effectiveness in Using...
summary
Tracing operations back to 2011 reveals Iran running long‑lived, high‑volume IO that moves from malware delivery to large‑scale media-like networks. Campaigns use fake LinkedIn profiles, fabricated news sites and hundreds of domains, plus Facebook, Instagram, Twitter, YouTube and Reddit assets; one malware campaign called Endless Mayfly ties espionage to a parallel media operation. Administrators sometimes geo‑locate to Iran, assets repeatedly rename and relaunch, showing domain‑heavy, cross‑platform persistence.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:32Whos here
- 1:08Social Media and Fake Profiles
- 3:59Iranian IO History
- 7:53Media Focused IO
- 9:04Global Footprint
- 11:20Volume
- 14:56Crossplatform
- 16:13Conclusion
related talks
52mIran's Soft-War for Internet Dominance
08mIran's Decade of Soft War: Dissidents, Trolls, and Khamenei
12mTheir Own Little War: Iran Adopts Disruptive Ransomware
21mMossad.com: How Iran is Using Fake Job Sites and Movie Studios to Catch Moles
09mDisrupting Cyber Adversaries: Meta's Approach to Deterrence
30mThe Hidden Layer of Cyberattacks
40mThe Last Remaining Cover for Action
32mOperation Clairvoyance: How APT Groups Spy on the Media Industry