US imposes sanctions on Iranian officials for their involvement in cyber-attacks targeting water plants

The US government has imposed sanctions on six officials from Iran's Islamic Revolutionary Guard Corps (IRGC) who have been accused of carrying out cyber-attacks on American water plants. These attacks took place late last year. The move comes as a response to a recent drone attack in Jordan that killed three US soldiers. The US has attributed the attack to an Iranian-backed militia group. Brian Nelson, Under Secretary of the Treasury for Terrorism and Financial Intelligence, described the cyber-attacks on critical infrastructure as dangerous and unacceptable. He warned that the US will take action and hold the perpetrators accountable. The sanctioned individuals are members of the IRGC's Cyber-Electronic Command (IRGC-CEC), including the head of the cyber organization and a commander in the IRGC-Quds Force, which is responsible for overseas operations. The US Cybersecurity & Infrastructure Security Agency (Cisa) has expressed concerns about the vulnerability of America's water systems to cyber-attacks. It highlighted the need for urgent action to protect these systems, which are essential for providing clean water to residents. The cyber-attacks, carried out by a group affiliated with the IRGC, targeted water facilities that used technology from an Israeli company. The attackers were able to disable a water pressure monitor due to the use of a default password. While the attack was considered low-level, it raised concerns about the increasing frequency and vulnerability of such attacks. Pennsylvania lawmakers have urged the Department of Justice to investigate the attacks and hold those responsible accountable. Cisa has warned about the cyber-security risks posed by several countries, including Iran, and emphasized the need for better awareness and preparedness in this regard.