Ajay Kumar: Created a new article

2023-09-25T18:44:05Z

Created a new article

New page

'''Operation Cleaver''', as labelled in a report by American firm [[Cylance Inc.]] in late 2014, was a [[cyberwarfare]] [[covert operation]] targeting critical infrastructure organizations worldwide, allegedly planned and executed by [[Iran]].

Cylance's report was later tacitly acknowledged in a confidential report by [[Federal Bureau of Investigation]] (FBI), though Iranian officials denied involvement in the operation.<ref name="Reuters2">{{cite web|url=https://www.reuters.com/article/us-cybersecurity-iran-fbi-idUSKBN0JQ28Z20141213|editor=Christian Plumb|first=Jim |last=Finkle|title=Exclusive: Iran hackers may target U.S. energy, defense firms, FBI warns|date=December 13, 2014 |access-date=March 30, 2015|work=[[Reuters]]}}</ref>

== Cylance report ==
[[File:Operation Cleaver.png|200px|thumbnail|Logo designed by Cylance]]
In December 2014, [[California]]-based cyber security firm [[Cylance Inc.]] published results of a 2-year investigation,<ref name="Bloomberg"/> an 86-page technical report, indicating that an operation, called "Operation Cleaver", has targeted the military, oil and gas, energy and utilities, transportation, airlines, airports, hospitals and aerospace industries organizations worldwide.<ref name="Tech Times">{{cite web|url=http://www.techtimes.com/articles/22160/20141215/operation-cleaver-is-bigger-threat-than-previously-thought-fbi-warns-us-businesses.htm|first= Quinten |last=Plummer|title=Operation Cleaver is Bigger Threat than Previously Thought, FBI Warns US Businesses|date=December 15, 2014 |access-date=March 30, 2015|work=Tech Times}}</ref>

The title "Operation Cleaver" alludes to frequent uses of the word "cleaver" in the malware's coding.<ref>{{cite web|last=Bertrand|first=Natasha|author-link=Natasha Bertrand|date=December 8, 2014|title=Iran Is Officially A Real Player In The Global Cyber War|url=http://www.businessinsider.com/iran-is-officially-a-real-player-in-the-cyber-war-2014-12|access-date=March 30, 2015|work=[[Business Insider]]}}</ref>

According to the report, over 50 entities in 16 countries have been hit by the campaign, based in the [[United States]], [[Israel]], [[China]], [[Saudi Arabia]], [[India]], [[Germany]], [[France]] and [[England]] among others.<ref name="Reuters"/>
Cylance's research does not name individual companies, but ''[[Reuters]]'' reports citing "a person familiar with the research" [[Navy Marine Corps Intranet]], [[Calpine]], [[Saudi Aramco]], [[Pemex]], [[Qatar Airlines]] and [[Korean Air]] were among the specific targets.<ref name="Reuters"/>

Stuart McClure, Cylance founder and CEO believes that the hackers are sponsored by Iran and have ties to [[Islamic Revolutionary Guard Corps]].<ref name="Bloomberg">{{cite web|url=https://www.bloomberg.com/news/articles/2014-12-02/iran-backed-hackers-target-airports-carriers-report|first1= Michael A |last1=Riley |first2= Jordan |last2=Robertson |title= Iran-Backed Hackers Target Airports, Carriers: Report |date=December 2, 2014 |access-date=March 30, 2015|work=[[Bloomberg News]]}}</ref>

== FBI report ==
According to ''[[Reuters]]'', the [[Federal Bureau of Investigation]] has filed a confidential "Flash" report, providing technical details about malicious software and techniques used in the attacks. The technical document said the hackers typically launch their attacks from two [[IP address]]es that are in Iran, but does not attribute the attacks to the [[Iranian government]].<ref name="Reuters"/> FBI warned businesses to stay vigilant and to report any suspicious activity spotted on the companies' computer systems.<ref name="Tech Times"/>

== Iran's reaction ==
Iran has officially denied involvement in the hacking campaign. "This is a baseless and unfounded allegation fabricated to tarnish the [[Iranian government]] image, particularly aimed at hampering [[Comprehensive agreement on the Iranian nuclear program|current nuclear talks]]", said Hamid Babaei, spokesman for [[Permanent Representative of Iran to the United Nations|Permanent mission of Islamic Republic of Iran to the United Nations]].<ref name="Reuters">{{cite web|url=https://www.reuters.com/article/us-cybersecurity-iran-idUSKCN0JG18I20141202|editor=Richard Valdmanis, Christian Plumb and W Simon|first=Jim |last=Finkle|title=Iran hackers targeted airlines, energy firms: report|date=December 2, 2014 |access-date=March 30, 2015|work=[[Reuters]]}}</ref>

==See also==
*[[Cyberwarfare in Iran]]

== References ==
{{reflist|colwidth=30em}}

== External links ==
* [https://www.cylance.com/content/dam/cylance/pdfs/reports/Cylance_Operation_Cleaver_Report.pdf Cylance Operation Cleaver Report]

{{Cyberwarfare in Iran}}
{{Hacking in the 2010s}}

[[Category:Cyberwarfare in Iran]]
[[Category:Cyberwarfare in the United States]]
[[Category:Cyberattacks]]
[[Category:Hacking in the 2010s]]
[[Category:Cyberattacks on energy sector]]
[[Category:Cybercrime in India]]

Operation Cleaver - Revision history

Ajay Kumar: Created a new article