Major Iranian IT vendor paying large ransom to resolve recent cyberattack | CyberScoop<\/title> <meta name=\"description\" content=\"The company, Tosan, which provides IT services to 45% of the country\u2019s banks, has paid $561,000 worth of bitcoin so far. \"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/iranian-it-vendor-ransom-cyberattack-banks\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Major Iranian IT vendor paying large ransom to resolve recent cyberattack\"> <meta property=\"og:description\" content=\"The company, Tosan, which provides IT services to 45% of the country\u2019s banks, has paid $561,000 worth of bitcoin so far. \"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/iranian-it-vendor-ransom-cyberattack-banks\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2024-09-06T16:51:32+00:00\"> <meta property=\"article:modified_time\" content=\"2024-09-06T17:09:41+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1280\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"AJ Vicens\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@AJVicens\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1721926675g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1725476969g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1724269863g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=ada0ad45b21fc79c6694\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/81668\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.6.1\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=81668\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Firanian-it-vendor-ransom-cyberattack-banks%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Firanian-it-vendor-ransom-cyberattack-banks%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-81668 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/iranian-it-vendor-ransom-cyberattack-banks\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\">\n<div class=\"stickybar__details\" readability=\"4.952380952381\">\n<div class=\"stickybar__info js-sticky-bar-content\" readability=\"32\">\n<p>Voting is open for the 2024 CyberScoop 50 awards! <\/p>\n<\/div>\n<p> <a class=\"stickybar__link button button-tertiary\" href=\"https:\/\/cyberscoop.com\/cyberscoop50\/vote\/\">Click here!<\/a> <\/div>\n<p> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"26.961647727273\">\n<div class=\"single-article__header-content\" readability=\"34.070833333333\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/news\/threats\/cybercrime\/\"> <span>Cybercrime<\/span> <\/a> <\/li>\n<\/ul>\n<p> The company, Tosan, which provides IT services to 45% of the country\u2019s banks, has paid $561,000 worth of bitcoin so far. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt=\"Iranian flag waving with cityscape on background in Tehran, Iran. (Sir Francis Canker Photography\/Getty Images)\" decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-2.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> Iranian flag waving with cityscape on background in Tehran, Iran. (Sir Francis Canker Photography\/Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"53.318646104546\"><body readability=\"106.72871452421\"><\/p>\n<p>An Iranian IT vendor that works with many of the nation\u2019s top banks and some of its government entities suffered a severe cyberattack and is in the process of paying a ransom in installments, according to emails and blockchain data reviewed by CyberScoop, contrary to claims from the Iranian government that a hack never occurred.<\/p>\n<p>The company, Tosan, provides IT services to 45% of the country\u2019s banks, serving 27 million Iranians, according to the company\u2019s website. The attack gave hackers access to data belonging to at least 20 of Iran\u2019s 29 active credit institutions, including those with government clients, according to <a href=\"https:\/\/www.politico.eu\/article\/iran-millions-ransom-massive-cyberattack-banks\/\">Politico Europe, which first reported the news Wednesday<\/a>.<\/p>\n<p>IRLeaks, the group that claimed responsibility for the attack, wrote in a since-deleted Aug. 9 post on its Telegram channel that if a deal was not reached, the group would put the data it obtained up for sale. The data included \u201ccomplete details of several million bank customers,\u201d according to the message, including account numbers, full names, dates of birth, nationalities, addresses, \u201cprecise\u201d transaction details and more. The impact of the attack is unclear. <\/p>\n<p>The group did not respond to a request for comment sent to the email address listed in the since-deleted message. The company also did not respond to a request for comment.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Emails between IRLeaks and Tosan CEO Arash Babaei \u2014 obtained by a third party, shared with CyberScoop and verified by a separate source familiar with the matter \u2014 show the two sides negotiating payment beginning Aug. 8. After Tosan asked IRLeaks to remove the Aug. 9 Telegram message, which the group did, Tosan sent 1 bitcoin to an address provided by IRLeaks, and IRLeaks acknowledged receipt. <\/p>\n<p>The two sides agreed to an initial payment of 1 bitcoin followed by a payment schedule of 3 bitcoin per week until a total of 35 bitcoin is paid. The wallet has so far received roughly 10 bitcoin worth about $561,000.<\/p>\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack.png?w=640&ssl=1\" alt class=\"wp-image-81670\"><figcaption class=\"wp-element-caption\">Image of an email between the parties discussing payment (CyberScoop)<\/figcaption><\/figure>\n<p>Jackie Burns Koven, head of cyber threat intelligence at Chainalysis, told CyberScoop that the wallet in question has received payments from at least two different Iranian exchanges, \u201cwhich could be consistent with payments from Iranian victims.\u201d <\/p>\n<p>The wallet had received $1.1 million in total between Sept. 3, 2023 and Sept. 2, 2024 across 60 deposits. The wallet was also used to purchase IT infrastructure, including domains and hosting services, Koven said. IRLeaks, which has nearly 19,000 subscribers on Telegram, has claimed attacks on <a href=\"https:\/\/cybernews.com\/news\/iranians-exposed-mysterious-hacker-sell-personal-data\/\">various other Iranian government targets<\/a> since <a href=\"https:\/\/ir.tgstat.com\/channel\/@irleaks\/stat\">first emerging online<\/a> in July 2023.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Iran International, a London-based news organization <a href=\"https:\/\/www.theatlantic.com\/international\/archive\/2024\/04\/iran-journalism-west-violence\/678038\/\">often critical of the Iranian government<\/a>, said in an <a href=\"https:\/\/x.com\/Iranintl_En\/status\/1823713891022725214\">Aug. 14 post on X<\/a> that a \u201cmajor cyberattack has targeted the Central Bank of Iran (CBI),\u201d adding that \u201cinitial assessments indicate this could be one of the largest cyberattacks ever against Iranian state infrastructure.\u201d <\/p>\n<p>The Mehr News Agency, based in Tehran, <a href=\"https:\/\/www.mehrnews.com\/news\/6196207\/%D8%B4%D8%A7%DB%8C%D8%B9%D9%87-%D8%B3%D8%A7%D8%B2%DB%8C-%D8%B1%D8%B3%D8%A7%D9%86%D9%87-%D9%87%D8%A7%DB%8C-%D9%85%D8%B9%D8%A7%D9%86%D8%AF-%D8%A8%D8%B1%D8%A7%DB%8C-%D8%AC%D9%84%D9%88%DA%AF%DB%8C%D8%B1%DB%8C-%D8%A7%D8%B2-%D8%B1%DB%8C%D8%B2%D8%B4-%D8%AF%D9%84%D8%A7%D8%B1\">reported the same day<\/a> that the Central Bank of Iran said that \u201cno system in the Central Bank and the banking system in general has been hacked,\u201d and that \u201chostile media are trying to disturb the mental peace of the society by publishing fake news about the hacking of the central bank system,\u201d according to a Google translation. <\/p>\n<p>The Iranian government has suffered a series of significant cyberattacks over the past couple of years. In May 2023, for instance, a person calling themselves GhyamSarnegouni \u2014 roughly translated to \u201cuprising until overthrow\u201d \u2014 began posting documents they claimed they obtained by compromising \u201cthe entire highly protected internal network of the executioner\u2019s presidential institution,\u201d referring to then-Iranian President Ebrahim Raisi. <\/p>\n<p>That group first emerged in January 2022 with the hacking and disruption of <a href=\"https:\/\/research.checkpoint.com\/2022\/evilplayout-attack-against-irans-state-broadcaster\/\">Iran\u2019s national broadcast service<\/a>. Other attacks tied to the group include the June 2022 hack of more than <a href=\"https:\/\/apnews.com\/article\/politics-iran-middle-east-dubai-united-arab-emirates-f9b79784cba77adcf8c88dafde11ee84\">5,000 municipal CCTV cameras in Tehran<\/a>, and an early <a href=\"https:\/\/english.mojahedin.org\/news\/iranian-dissidents-disrupt-over-210-regime-foreign-ministry-websites-and-servers\/\">May 2023 hack of the Iranian ministry of foreign affairs<\/a>, which included more than 200 defaced websites and the publication of a trove of sensitive internal government files.<\/p>\n<p>The group continues to post internal Iranian government documents almost daily.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Other personas have similarly taken their own shots at Iranian government targets, including <a href=\"https:\/\/cyberscoop.com\/iran-nuclear-emails-hack-leak-black-reward\/\">Black Reward<\/a>, <a href=\"https:\/\/www.iranintl.com\/en\/202203146632\">Tapandegan<\/a> and <a href=\"https:\/\/cyberscoop.com\/sanctions-iran-masha-amini-cyber\/\">Lab Dookhtegan<\/a>. Another group, known as Predatory Sparrow, which has <a href=\"https:\/\/www.timesofisrael.com\/gantz-orders-probe-after-tv-reports-hint-idf-behind-iran-steel-plant-cyberattack\/\">possible ties to Israel<\/a>, targeted steel mills it said were tied to the Islamic Revolutionary Guard Corps (IRGC), posting a video after the apparent breach showing what appeared to be the inside of an industrial facility.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"1.35\">\n<div class=\"author-card\" readability=\"8\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/09\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack-1.jpg?w=640&ssl=1\" alt=\"AJ Vicens\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by AJ Vicens<\/h4>\n<p> AJ covers nation-state threats and cybercrime. He was previously a reporter at Mother Jones. Get in touch via Signal\/WhatsApp: (810-206-9411). <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Geopolitics<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/iranian-it-vendor-ransom-cyberattack-banks\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Major Iranian IT vendor paying large ransom to resolve recent<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[282,323,513,2613,46],"tags":[286,327,517,2614,54],"class_list":["post-5177","post","type-post","status-publish","format-standard","hentry","category-cybercrime","category-extortion","category-iran","category-irleaks","category-ransomware","tag-cybercrime","tag-extortion","tag-iran","tag-irleaks","tag-ransomware"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybercrime\/\" rel=\"category tag\">cybercrime<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/extortion\/\" rel=\"category tag\">extortion<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/iran\/\" rel=\"category tag\">Iran<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/irleaks\/\" rel=\"category tag\">IRLeaks<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ransomware\/\" rel=\"category tag\">ransomware<\/a>","tag_info":"ransomware","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/5177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=5177"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/5177\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=5177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=5177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=5177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":5177,"date":"2024-09-06T11:51:32","date_gmt":"2024-09-06T16:51:32","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=81668"},"modified":"2024-09-06T11:51:32","modified_gmt":"2024-09-06T16:51:32","slug":"major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/09\/06\/major-iranian-it-vendor-paying-large-ransom-to-resolve-recent-cyberattack\/","title":{"rendered":"Major Iranian IT vendor paying large ransom to resolve recent cyberattack"},"content":{"rendered":"