Banks, dam targeted by Iranian hackers, US says; 7 charged

WASHINGTON (AP) – Seven hackers tied to the Iranian government were charged Thursday in a series of punishing cyberattacks on dozens of banks and a small dam outside New York City, intrusions that reached into America’s infrastructure and disrupted the financial system, federal law enforcement officials said.

The indictment announced at the Justice Department reveals the determination of overseas hackers to cripple vital American interests, the officials said.

“The attacks were relentless, systematic and widespread,” Attorney General Loretta Lynch said. “They threatened our economic well-being and our ability to compete fairly in the global marketplace, both of which are directly linked to our national security.”

One of the seven alleged hackers is accused of repeatedly gaining access to the control system of the Bowman Avenue Dam, a small flood-control structure in Rye Brook, about 20 miles north of New York City. With that access, the hacker was able to get information about the dam’s operations, including its water level, temperature and the status of the sluice gate.

The hacker would have been able to operate the sluice gate, which controls water levels and flow rates, but the gate had been disconnected for maintenance when the intrusion occurred.

The New York dam is small, only about 20 feet tall. A recently installed sluice gate at the dam, which is digitally controlled, is intended to help control downstream flooding that could inundate nearby homes.

The seven accused hackers worked for a pair of Iranian computer companies linked to the Iranian government, including the Islamic Revolutionary Guard Corps, the U.S. said.

None of the individuals is in American custody, and it’s not clear whether they will ever be arrested or whether criminal indictments in absentia can be effective in combatting such crimes. The indictment two years ago of Chinese military hackers has not led to any of them being hauled before a U.S. judge.

Officials said the goal of such cases is to put cybercriminals on notice that their mouse clicks can be traced, even if they’re on the other side of the globe.

“The message of this case is that we will work together to shrink the world and impose costs on these people so that no matter where they are, we will reach them,” said FBI Director James Comey.

The criminal case is the latest salvo in a contentious cyber relationship between Iran and the U.S.

In 2010, the so-called Stuxnet virus disrupted the operation of thousands of centrifuges at a uranium enrichment facility in Iran. Iran says that assault and other computer virus attacks are part of a concerted effort by Israel, the U.S. and their allies to undermine its nuclear program through covert operations.

The indictments unsealed Thursday stem from a series of cyber intrusions between 2011 and 2013 that officials say targeted 46 victims, primarily in the financial sector, that disabled bank websites and interfered with customers’ ability to do online banking. The attacks cost the victims tens of millions of dollars in remediation costs, but no customers lost money.

It was the latest instance of the Obama administration publicly blaming foreign nations for damaging cyber intrusions.

The Justice Department in May 2014 indicted five Chinese military officials suspected of hacking into several major American companies – including U.S. Steel and Westinghouse – and stealing trade secrets and confidential business information. None of those individuals has been brought to America to face charges.

And that December, the federal government linked a damaging attack on Sony Pictures Entertainment to North Koreans.

The Justice Department is determined to remove a cloak of “perceived anonymity” long enjoyed by foreign hackers, said John Carlin, the department’s top national security official.