White House set to send Iran cyber message

The charges would be the first time the DOJ has indicted foreign government workers for hacking since 2014, when prosecutors accused five members of the Chinese military of trying to infiltrate various American companies.

Cyber policy specialists explain that these indictments are meant primarily as a message to other countries: We know what you’re up to.

“Clearly they want to decrease the level of hacking, but they also want to send a signal about U.S. attribution capabilities in an attempt to kind of create a deterrence,” said Segal, author of the new book, “The Hacked World Order.”

Experts believe the Department of Justice held off on the Iran indictments until after the Iran deal was finalized.

The 2013 intrusion became public in December — three months after Congress failed to reject the nuclear deal — when officials leaked details of the classified incident to the media.

It makes for an ideal test case of the Obama administration’s emerging “name and shame” cyber policy, experts said. It was a relatively minor attack — the hackers never took control of the system — and the details had already been made public.

Iran’s economic sanctions were also lifted in January, giving Tehran access to roughly $100 billion of its formerly frozen assets that can now be funneled into cyber and technology development, Kagan said.

“Investing in the economy in Iran means investing in [information technology],” he explained.

All these factors make the timing ideal for the White House to say, “We’re getting better at attribution,” and “Iran should be careful,” Segal said.

Conservatives are skeptical, however, that the indictments will do anything to deter Iran.

“Shame only works if someone is going to be embarrassed about this,” said Fred Kagan, a national security scholar at the conservative American Enterprise Institute (AEI) and co-author of a recent report on the Iranian cyber threat. “I think the Iranians are quite proud of this. I would bet you that there are guys in Iran who are high-fiving … getting huge public credit for this.”

A few Republican lawmakers say President Obama has been far too slow to act.

“It is downright shameful that it has taken President Obama three years to denounce Iran for a malicious cybersecurity attack on our country while at the same time sitting at a negotiating table with them,” Sen. Steve Daines (R-Mont.) said in a statement last week.

Policy experts concede that indictments and public accusations are unlikely to demonstrably stymie Iran’s cyber program. But the charges will provide evidence that could lay the groundwork for economic sanctions.

Obama last year issued an executive order that empowered the Treasury Department to levy sanctions for hacking. But the administration has yet to wield its new powers. Many suspect the Iranian dam hack may be the first test case.