Hackers have reportedly stolen approximately $90 million from Iran’s largest cryptocurrency exchange recently, according to several independent tracking firms in the crypto space.
A well-known pro-Israel hacking group, referred to as “predatory sparrows,” has been launching cyberattacks apparently aimed at further destabilizing Iran during a time of military actions from Israel.
In a message posted on X by a user named Farzie, the group claimed responsibility for the attack on Iran’s Nobitex cryptocurrency exchange, asserting that it was used by Iran to evade international sanctions. Intriguingly, experts have indicated that the hackers might have transferred the stolen cryptocurrency into a digital wallet, effectively liquidating their gains.
Nobitex acknowledged the breach in a message on its website, announcing that access to the platform would be temporarily halted as a precautionary measure. Crypto tracking companies like Oval and TRM Lab have confirmed that the stolen code has been redirected to a crypto account.
On a separate note, the predatory sparrows announced they had compromised the data of Iran’s state-owned Sepa bank, claiming that members of the IRGC had used its services. Local reports suggest there could be disruptions in banking services, particularly at gas stations.
Sources from Tehran mentioned that they had checked around ten ATMs recently and found many either out of order or depleted of cash.
These cyberattacks represent a dangerous escalation in the ongoing shadow wars between Israel and Iran, where both sides have engaged in digital espionage and damaging attacks for strategic benefits.
In another attack on Wednesday, hackers targeted Iran’s state television, broadcasting messages encouraging public unrest against the government. However, no one has officially taken responsibility for this attack yet.
The predatory sparrows have claimed credit for several significant cyber incidents over the past five years, which have disrupted Iranian steel factories and financial transactions. While they present themselves as hacktivists against Iran, cybersecurity experts believe they are likely connected to Israel.
Hamid Kashfi, a cybersecurity analyst, mentioned that the actions of the predatory sparrows could negatively impact ordinary Iranians, even though they profess to be targeting IRGC resources. “Many Iranians rely on banking services,” Kashfi pointed out, which could further complicate the situation.
The escalating cyber activities between Israel and Iran seem designed to instill fear in both nations. For instance, many Israelis have received misleading texts from supposed authorities warning that bomb shelters are unsafe.
On the Iranian side, the government has been cautioning citizens against using WhatsApp, suspecting that Israel may be gathering information from those communications. However, a spokesperson for Meta, the parent company of WhatsApp, has dismissed these allegations, reiterating that messages are protected with end-to-end encryption.
