Iranian hackers disrupt UAE TV with deepfake news

Microsoft analysts refer to reports indicating that disruptions by a group known as Cotton Sandstorm also affected audiences in the UK and Canada

According to Microsoft analysts, Iranian state-backed hackers disrupted TV streaming services in the United Arab Emirates by broadcasting a deepfake news report about the war in Gaza. The tech company stated that a hacking operation conducted by the Islamic Revolutionary Guards, a key branch of the Iranian armed forces, had disrupted streaming platforms in the UAE with an AI-generated news broadcast called “For Humanity.”

The fabricated news presenter presented unverified images purportedly depicting Palestinians injured and killed in Israeli military operations in Gaza. Microsoft analysts stated that the hacking group Cotton Sandstorm published videos on the Telegram messaging platform demonstrating their hacking into three online streaming services and disrupting news channels with the fake newscaster.

According to the Khaleej Times, a UAE-based news service, Dubai residents using an HK1RBOXX set-top box experienced interruptions in December, featuring a message stating: “We have no choice but to hack to deliver this message to you.” This was followed by the AI-generated anchor introducing “graphic” footage, along with a ticker displaying the number of people killed and wounded in Gaza thus far.

Microsoft also mentioned disruptions reported in Canada and the UK, with affected channels including the BBC, although the BBC was not directly hacked.

Microsoft stated in a blog post accompanying a report on Iranian cyber-espionage: “This marked the first Iranian influence operation Microsoft has detected where AI played a key component in its messaging and is one example of the fast and significant expansion in the scope of Iranian operations since the start of the Israel-Hamas conflict.”

“The disruption reached audiences in the UAE, UK, and Canada.”

Advancements in generative AI, which refers to technology capable of rapidly producing convincing text, voice, and images from simple prompts, have led to an increase in deepfake content online. This includes false images of Taylor Swift and robocalls featuring AI-generated voices, such as those mimicking Joe Biden. Deepfake refers to a hoax that uses AI to create fake images, most commonly fake videos of people.

Experts are concerned that AI-generated content could be used on a large scale to disrupt elections this year, including the US presidential election. In 2020, Iran targeted the US election with a cyber campaign that included sending intimidating emails to voters, claiming to be from members of the far-right Proud Boys group, setting up a website inciting violence against FBI director Christopher Wray and others, and spreading disinformation about voting infrastructure.

Microsoft stated: “Looking ahead to the 2024 US presidential election, Iranian activities could build on what occurred in 2020, when they impersonated American extremists and incited violence against US government officials.”

Microsoft stated that Iranian state-backed actors have launched a series of cyber-attacks and online efforts to manipulate opinion since the October 7 Hamas attacks. These tactics include exaggerating the impact of alleged cyber-attacks, leaking personal data from an Israeli university, and targeting pro-Israel Albania, Bahrain (a signatory to the Abraham Accords formalizing relations with Israel), and the US.