Facebook Removes 200 Accounts Run By Iran Hackers

July 16, 2021

On Thursday, Facebook announced that it had suspended around 200 accounts run by some attackers in Iran belonging to a cyber espionage operation.

The operation targeted mostly U.S. military personnel and people working at defense and aerospace companies.

The group, dubbed “Tortoiseshell” by security experts, used fake online personas to build trust with targets and drive them to malicious websites that would infect their devices.

Facebook said the group would use messaging, email and collaboration services to spread malware.

Hackers mainly targeted people in the U.S. and U.K.

Facebook has blocked the malicious domains and Google said it has added related domains to its “blocklist.”

For more information, read the original story in Reuters.

Top Stories

Related Articles

March 2, 2026 Thousands of exposed Google Cloud API keys can authenticate to Gemini endpoints when the Generative Language API more...

March 2, 2026 Threat actors are exploiting Microsoft Entra ID through Open Authorization (OAuth) consent abuse, using seemingly legitimate third-party more...

February 23, 2026 Researchers say they’ve identified a new strain of Android malware that uses Google’s own Gemini AI model more...

February 23, 2026 Texas officials are warning about what could be the largest data breach in U.S. history, with notification more...

Picture of TND News Desk

TND News Desk

Staff writer for Tech Newsday.
Picture of TND News Desk

TND News Desk

Staff writer for Tech Newsday.

Jim Love

Jim is an author and podcast host with over 40 years in technology.

Share:
Facebook
Twitter
LinkedIn