EU Sanctions Chinese and Iranian Entities Over Alleged Cyberattacks
Summary
The EU sanctioned three entities and two individuals from China and Iran over alleged cyber operations, including mass device compromise and disruptions tied to the 2024 Paris Olympics. Measures include asset freezes, economic restrictions and travel bans.
Key points
- The EU Council sanctioned three entities and two individuals under its horizontal cyber sanctions regime.
- The EU says Integrity Technology Group supplied tools used to compromise more than 65,000 devices across six EU member states in 2022–2023.
- The Council targeted Anxun Information Technology and two co-founders over alleged hacking services directed at critical infrastructure and government functions.
- The EU attributes an alleged French subscriber-database breach and dark-web sale, Paris Olympics billboard disruptions, and compromise of a Swedish SMS service to Iran-based Emennet Pasargad.
- The sanctions include EU asset freezes and bans on providing economic resources; the two Anxun co-founders also face travel restrictions.
- The article reports that the EU sanctions list now covers 19 individuals and seven corporate entities.
Article Details
- Event Type
- The EU Council imposed cyber sanctions on three entities and two individuals from China and Iran over alleged cyber espionage, attacks on critical infrastructure, and cyberattacks connected to the 2024 Paris Olympics.
- Impact
- The EU alleges that Integrity Technology Group supplied tooling used to compromise more than 65,000 devices across six EU member states; Anxun Information Technology provided hacking services targeting critical infrastructure and government functions; and Emennet Pasargad breached a French subscriber database, sold stolen data, hacked digital billboards during the 2024 Paris Olympics, and compromised a Swedish SMS service. The sanctions freeze EU assets, prohibit EU citizens and businesses from providing economic resources to the targets, and impose travel bans on the two Anxun co-founders.
Threat Actors
Anxun Information TechnologyThe EU Council sanctioned the company for providing hacking services allegedly aimed at critical infrastructure and government functions of EU member states.Emennet PasargadThe EU attributes cyberattacks to this Iran-based group, including an alleged breach of a French subscriber database, hacking digital billboards during the 2024 Paris Olympics, and compromising a Swedish SMS service.
Vendors
Anxun Information TechnologyAnxun Information Technology and two co-founders were targeted for providing hacking services against critical infrastructure and government functions.Integrity Technology GroupIntegrity Technology Group allegedly supplied tooling used to compromise over 65,000 devices across six EU member states.
Countries
ChinaThe EU Council has imposed new sanctions on three entities and two individuals from China and Iran for cyber espionage, attacks on critical infrastructure, and a high-profile digital hijacking during the 2024 ParisIranThe EU Council has imposed new sanctions on three entities and two individuals from China and Iran for cyber espionage, attacks on critical infrastructure, and a high-profile digital hijacking during the 2024 Paris
Industries
Critical infrastructureon three entities and two individuals from China and Iran for cyber espionage, attacks on critical infrastructure, and a high-profile digital hijacking during the 2024 Paris Olympics.GovernmentAnxun Information Technology and two co-founders were targeted for providing hacking services against critical infrastructure and government functions.