Sign up for our daily briefing

Make your busy days simpler with Axios AM/PM. Catch up on what's new and why it matters in just 5 minutes.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Denver news in your inbox

Catch up on the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Des Moines news in your inbox

Catch up on the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Minneapolis-St. Paul news in your inbox

Catch up on the most important stories affecting your hometown with Axios Twin Cities

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tampa Bay news in your inbox

Catch up on the most important stories affecting your hometown with Axios Tampa Bay

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Charlotte news in your inbox

Catch up on the most important stories affecting your hometown with Axios Charlotte

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

llustration: Aïda Amer/Axios

A hacker group believed to carry out some of the Iranian government's destructive attacks is focusing on makers of industrial control systems, according to a presentation a Microsoft employee will give at Thursday's CyberWarCon detailed in a new Wired article.

Why it matters: The group, nicknamed APT 33, Refined Kitten and Elfin, has been known to use malware to damage computer systems in the past, leading the Microsoft researcher presenting the talk on Thursday, Ned Moran, to speculate that the hackers may be laying the groundwork for future destructive attacks on industrial systems.

To be clear: The group has also been associated with traditional, fact-finding and source producing espionage as well. It's tough to guess the endgame of most hackers from their opening moves.

Industrial control systems, as the name implies, are the computerized systems that interface with pumps, fans and robots carrying out industrial tasks.

What they found: Moran told Wired that APT 33 has changed its tactics in recent months. In the past, the group had hacked systems by guessing passwords of employees at tens of thousands of different organizations at a time, but has now shifted to focusing on more employees at each of a smaller number—roughly 2,000—targets.

  • Around half the top 25 targets were makers or maintainers of industrial systems.

APT 33 has a history of attacking aerospace and oil operations, as well as politicians, academics and the water source for a U.S. military facility.

  • It has been connected to two strains of hard drive erasing "wiper" malware known: ShapeShift and Shamoon. Shamoon has been used in some of the most destructive cyber attacks in history, including an attack on Saudi Aramco.

Go deeper: Infamous Shamoon malware re-emerges.

Go deeper

Tech scrambles to derail inauguration threats

Illustration: Sarah Grillo/Axios

Tech companies are sharing more information with law enforcement in a frantic effort to prevent violence around the inauguration, after the government was caught flat-footed by the Capitol siege.

Between the lines: Tech knows it will be held accountable for any further violence that turns out to have been planned online if it doesn't act to stop it.

Dave Lawler, author of World
2 hours ago - World

Uganda's election: Museveni declared winner, Wine claims fraud

Wine rejected the official results of the election. Photo: Sumy Sadruni/AFP via Getty

Yoweri Museveni was declared the winner of a sixth presidential term on Saturday, with official results giving him 59% to 35% for Bobi Wine, the singer-turned-opposition leader.

Why it matters: This announcement was predictable, as the election was neither free nor fair and Museveni had no intention of surrendering power after 35 years. But Wine — who posed a strong challenged to Museveni, particularly in urban areas, and was beaten and arrested during the campaign — has said he will present evidence of fraud. The big question is whether he will mobilize mass resistance in the streets.

Off the Rails

Episode 1: A premeditated lie lit the fire

Photo illustration: Sarah Grillo/Axios. Photo: Chip Somodevilla/Getty Images

Beginning on election night 2020 and continuing through his final days in office, Donald Trump unraveled and dragged America with him, to the point that his followers sacked the U.S. Capitol with two weeks left in his term. Axios takes you inside the collapse of a president with a special series.

Episode 1: Trump’s refusal to believe the election results was premeditated. He had heard about the “red mirage” — the likelihood that early vote counts would tip more Republican than the final tallies — and he decided to exploit it.

"Jared, you call the Murdochs! Jason, you call Sammon and Hemmer!”