Iran-linked hackers have threatened to release more emails stolen from US President Donald Trump's entourage, Reuters reports.
The new threat comes after they released a previous batch of emails to the media ahead of the 2024 US election.
The hackers, who use the pseudonym "Robert", said they had approximately 100 gigabytes of emails from the accounts of White House Chief of Staff Susie Wiles, Trump lawyer Lindsay Halligan, Trump adviser Roger Stone and porn star-turned-Trump antagonist, Stormy Daniels.
"Robert" raised the issue of selling the materials, but did not provide details about their plans. The hackers did not describe the content of the emails.
US Attorney General Pam Bondi called the intrusion a "brazen cyberattack".
FBI Director Kash Patel said: "Anyone involved in any type of national security breach will be investigated and prosecuted to the fullest extent of the law.".
"This so-called "cyberattack" is nothing more than digital propaganda, and the targets are not random. "This is a calculated smear campaign designed to harm President Trump and discredit honest public officials who serve our country with distinction," the cybersecurity agency CISA said.
Tehran has previously denied engaging in cyberespionage.
The Roberts became more active in the final months of the 2024 presidential campaign, when they claimed to have hacked into the email accounts of several Trump allies, including Wiles.
The hackers then sent emails to journalists.
Some of the leaked materials have been confirmed to be authentic, including an email that documents a financial agreement between Trump and lawyers representing former presidential candidate Robert F. Kennedy Jr., now Trump's health secretary.
Other materials included Trump campaign communications to Republican candidates and discussions of settlement negotiations with Daniels.
Although the leaked documents received some coverage last year, they did not have a significant impact on the presidential race, which Trump won.
In a September 2024 indictment, the U.S. Department of Justice alleged that the Iranian Revolutionary Guard Corps led the hacking operation "Robert."
After Trump's election, "Robert" clarified that no more leaks were planned. Most recently, in May, the hackers announced: "We're retired, man." But the group resumed communication after the 12-day air war between Israel and Iran this month, which ended with the US bombing of Iranian nuclear facilities.
This week, "Robert" announced that they were organizing the sale of stolen emails.
Frederick Kagan, a scholar at the American Enterprise Institute who has written about Iranian cyberespionage, said that Tehran has suffered serious damage in the conflict and its spies are likely trying to retaliate in ways that do not lead to further action by the US or Israel.
"The default explanation is that everyone is ordered to use any asymmetric means that are unlikely to provoke the resumption of major military activity between Israel and the US," he noted. "Leaking another bunch of emails is unlikely to do that".
Despite concerns that Tehran could unleash digital chaos, Iranian hackers have not been involved during the conflict. U.S. cybersecurity officials have warned that American companies and critical infrastructure operators could still be in Tehran's crosshairs.