- By Supratik Das
- Tue, 01 Jul 2025 07:14 PM (IST)
- Source:JND
An Iran-linked hacking group self-identifying as "Robert" threatened to release additional emails allegedly hacked from the inner circle of US President Donald Trump, after distributing a prior batch to the media ahead of the 2024 US election. In a series of online exchanges with Reuters on Sunday and Monday, the hackers asserted they had access to the emails of about 100 gigabytes of Trump's top aides including White House Chief of Staff Susie Wiles, Trump attorney Lindsey Halligan, longtime friend Roger Stone, and adult film star Stormy Daniels, who has been a vocal Trump critic for many years. The hackers threatened to sell the pilfered material but declined to give details of their intentions or the subject of the emails.
US Attorney General Pam Bondi termed the hacking as an "unconscionable cyber-attack." The FBI issued a statement quoting Director Kash Patel, who pledged, "Anyone connected to any type of breach of national security will be thoroughly investigated and prosecuted to the fullest extent of the law." The Cybersecurity and Infrastructure Security Agency (CISA) downplayed the hack as cyber propaganda, referring to it as a "calculated smear campaign intended to harm President Trump and discredit dedicated public servants."
Hackers Surface Again After US-Iran Attack
The hacking group made their first appearance in the final months of the 2024 US presidential election, when they asserted that they had infiltrated the email accounts of a number of Trump supporters. The hackers at that time issued selected emails to reporters, some of which Reuters was able to independently authenticate. Leaked documents from a year ago allegedly contained emails detailing a financial deal between Trump and Robert F. Kennedy Jr.'s attorneys, current US Health Secretary, and also internal Trump campaign deliberations regarding GOP prospects and settlement talks with Daniels. The leaks did little to impact Trump’s re-election bid, which he ultimately won. In September 2024, the US Justice Department indicted Iran’s Revolutionary Guards for allegedly orchestrating the Robert hacking operation. Tehran has repeatedly denied involvement in cyber-espionage.
Although the group had reported to have "retired" following Trump's win, it emerged this week in the aftermath of the recent 12-day air war between Israel and Iran, which concluded with US strikes on Iranian nuclear facilities. Through messages this week, "Robert" reported to Reuters that they were arranging a sale of the stolen emails and wished media outlets would "broadcast this matter." American Enterprise Institute's Frederick Kagan, a cyber-operations expert on Iran, hypothesized that the leaks might be Tehran's means of striking back without inducing additional US or Israeli military strikes.
American Enterprise Institute scholar Frederick Kagan, who has written about Iranian cyberespionage, said Tehran suffered serious damage in the conflict and its spies were likely trying to retaliate in ways that did not draw more U.S. or Israeli action. "A default explanation is that everyone's been ordered to use all the asymmetric stuff that they can that's not likely to trigger a resumption of major Israeli/U.S. military activity," he said. "Leaking a bunch more emails is not likely to do that." Despite worries that Tehran could unleash digital havoc, Iran's hackers took a low profile during the conflict.
In spite of the threats, US cyber officials on Monday called on American businesses and critical infrastructure operators to remain vigilant, cautioning that they may still be in Tehran's crosshairs.