LA Metro Cyberattack Linked to Iranian State-Sponsored Hackers

A cyberattack that disrupted LA Metro's internal systems in mid-March has been linked to Iranian state-sponsored hackers, according to cyber intelligence firm Gambit. The attack, initially claimed by a group calling itself Ababil of Minab, resulted in hundreds of terabytes of data being wiped and over one terabyte exfiltrated, though passenger rail and bus services remained unaffected. Forensic analysis has connected Ababil of Minab to infrastructure previously used by Black Shadow, a hacking group attributed to Iran's Ministry of Intelligence and Security.