Meta blocks Iran-linked hackers on WhatsApp targeting US officials

California: Meta, the parent company of Facebook, Instagram, and WhatsApp, has blocked a group of WhatsApp accounts linked to Iranian-affiliated hackers impersonating tech support agents to deceive users.

Targeted Phishing Attempts

The hackers posed as support representatives from companies like AOL, Google, Yahoo, and Microsoft, attempting to trick individuals into revealing sensitive information. Their targets included people connected to U.S. President Joe Biden, Vice President Kamala Harris, former President Donald Trump, as well as political and diplomatic figures across several countries.

Connection to APT42

Meta's investigation revealed these activities were linked to APT42, an Iranian threat group known for persistent phishing campaigns aimed at stealing credentials. Past targets have included military personnel, dissidents, human rights activists, and politicians across the globe.

Collaboration and Prevention Efforts

While no evidence suggests the targeted WhatsApp accounts were successfully compromised, Meta has shared its findings with law enforcement and other tech companies to prevent further attacks. The suspicious activity was detected and blocked after users reported receiving dubious messages.