US Bounty Targets Iranian Cyber Officer as Hidden Unicode Exploits and Chinese Hackers Raise New Security Concerns

Washington announced a ten‑million‑dollar reward for information leading to the identification or arrest of a senior Iranian cyber operative, signaling an escalation in the United States' offensive cyber strategy amid rising geopolitical tensions.

The bounty, issued by the State Department in coordination with the Department of Justice, follows a series of high‑profile intrusions attributed to Iranian state‑aligned groups, including credential‑theft campaigns and ransomware deployments that have targeted critical infrastructure in the Middle East and beyond.

At the same time, security researchers have uncovered a new phishing technique that leverages invisible Unicode characters to evade detection. By inserting zero‑width spaces and other non‑printing symbols into malicious URLs, attackers can craft messages that appear benign to automated filters while directing victims to compromised sites.

Separately, analysts have traced the military connections of the Chinese hacking collective known as QTFY. The group, previously linked to espionage against defense contractors, appears to receive logistical support from units within the People’s Liberation Army, raising concerns about the blurring line between state‑sponsored cyber‑espionage and criminal activity.

In related cyber‑crime news, a defendant convicted of orchestrating a large‑scale SIM‑swap scheme received a prison sentence, underscoring law‑enforcement’s focus on mobile‑network fraud that has enabled unauthorized access to bank accounts and cryptocurrency wallets.

Finally, a review of the Glasswing research findings has been published, highlighting the need for more transparent methodology in vulnerability disclosures. The review calls for clearer attribution standards and better coordination between independent researchers and affected vendors to prevent premature public release of exploit details.