{"id":18298,"date":"2025-06-23T18:43:24","date_gmt":"2025-06-23T18:43:24","guid":{"rendered":"https:\/\/lonecandle.com\/?p=18298"},"modified":"2025-06-23T18:43:25","modified_gmt":"2025-06-23T18:43:25","slug":"bank-hacks-internet-shutdowns-and-crypto-heists-heres-how-the-war-between-israel-and-iran-is-playing-out-in-cyberspace","status":"publish","type":"post","link":"https:\/\/lonecandle.com\/?p=18298","title":{"rendered":"Bank hacks, internet shutdowns and crypto heists: Here\u2019s how the war between Israel and Iran is playing out in cyberspace"},"content":{"rendered":"\n<p>&#8220;Some of the most aggressive efforts over the past week have been cyberattacks against major financial institutions in Iran and disinformation campaigns aimed at causing chaos and confusion in Israel.<\/p>\n\n\n\n<p>A pro-Israeli hacking group known as Predatory Sparrow claimed credit for&nbsp;<a href=\"https:\/\/www.axios.com\/2025\/06\/17\/iran-bank-sepah-cyberattack-israel\" target=\"_blank\" rel=\"noreferrer noopener\"><u>a cyberattack last week<\/u><\/a>&nbsp;on Iran\u2019s Bank Sepah, which caused widespread account issues for customers. The group also later claimed credit for&nbsp;<a href=\"https:\/\/www.pbs.org\/newshour\/world\/hackers-reportedly-wipe-out-90-million-from-largest-iranian-cryptocurrency-exchange\" target=\"_blank\" rel=\"noreferrer noopener\"><u>draining around $90 million from Nobitex<\/u><\/a>, Iran\u2019s largest cryptocurrency exchange, and for&nbsp;<a href=\"https:\/\/x.com\/gonjeshkedarand\/status\/1935593397156270534?s=46&amp;t=7qgObawVR3sD59eITHivyA\" target=\"_blank\" rel=\"noreferrer noopener\"><u>posting stolen Nobitex source code lists on the social media platform X.<\/u><\/a><\/p>\n\n\n\n<p>Hackers also targeted Iranian news stations. Videos circulated online appeared to show&nbsp;<a href=\"https:\/\/www.timesofisrael.com\/iran-blames-israel-for-hacking-state-tv-broadcast-with-calls-for-uprising\/\" target=\"_blank\" rel=\"noreferrer noopener\"><u>Iranian state TV broadcasting anti-regime messages<\/u><\/a>&nbsp;last week.<\/p>\n\n\n\n<p>The&nbsp;<a href=\"https:\/\/techcrunch.com\/2025\/06\/20\/irans-government-says-it-shut-down-internet-to-protect-against-cyberattacks\/\" target=\"_blank\" rel=\"noreferrer noopener\"><u>Iranian government shut down the nation\u2019s internet<\/u><\/a>&nbsp;in response to the attacks late last week, a blackout that was&nbsp;<a href=\"https:\/\/x.com\/netblocks\/status\/1936774099474206878?s=46&amp;t=7qgObawVR3sD59eITHivyA\" target=\"_blank\" rel=\"noreferrer noopener\"><u>largely still ongoing on Sunday<\/u><\/a>.<\/p>\n\n\n\n<p>\u201cGaining control of the flow of information is certainly to be expected from the regime \u2026 they suspect that there is maybe an attempt to mobilize public attention,\u201d Vatanka said.<\/p>\n\n\n\n<p>Top Iranian officials and their security teams were also advised last week to&nbsp;<a href=\"https:\/\/www.politico.eu\/article\/iran-orders-officials-to-ditch-connected-devices\/\" target=\"_blank\" rel=\"noreferrer noopener\"><u>stop using internet-connected devices<\/u><\/a>, in particular telecommunication devices, to protect against potential Israeli disruptions. Last year,&nbsp;<a href=\"https:\/\/www.politico.eu\/article\/israel-pagers-hezbollah-lebanon-health-ministry\/\" target=\"_blank\" rel=\"noreferrer noopener\"><u>thousands of pagers<\/u><\/a>&nbsp;used by the Iranian proxy militant group Hezbollah exploded across Lebanon, leaving thousands injured.<\/p>\n\n\n\n<p>One reason Israel\u2019s cyberattacks may have been more effective in this round of fighting is that Israel struck Iranian facilities first, giving it more time to prepare its offensive and defensive options before Iran could retaliate.<\/p>\n\n\n\n<p>Iran and its proxy organizations are fighting back, albeit on a smaller scale. Israel\u2019s National Cyber Directorate&nbsp;<a href=\"https:\/\/www.gov.il\/he\/pages\/21_06_2025\" target=\"_blank\" rel=\"noreferrer noopener\"><u>warned Israelis abroad on Saturday<\/u><\/a>&nbsp;not to fill out forms on malicious websites that are seeking to gather intelligence on these individuals.<\/p>\n\n\n\n<p>Gil Messing, chief of staff for Israeli cyber company Check Point Software, said Saturday just before the U.S. strikes that his company had tracked cyber and disinformation campaigns against Israel \u201cescalating a bit,\u201d though no new major attacks had been reported.<\/p>\n\n\n\n<p>Messing said that there was a \u201cflood of disinformation\u201d pouring onto social media last week, including messages discouraging Israelis from entering shelters during attacks and erroneous texts about gas and supply shortages.<\/p>\n\n\n\n<p>Israel\u2019s civilian cyber defense agency warned that Iran was renewing its efforts to&nbsp;<a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2025-06-20\/iran-hijacking-home-security-cameras-to-spy-within-israel\" target=\"_blank\" rel=\"noreferrer noopener\"><u>hack into internet-connected cameras<\/u><\/a>&nbsp;for espionage purposes.<\/p>\n\n\n\n<p>John Hultquist, chief analyst for Google Threat Intelligence Group,&nbsp;<a href=\"https:\/\/x.com\/johnhultquist\/status\/1936607789947695467?s=46&amp;t=7qgObawVR3sD59eITHivyA\" target=\"_blank\" rel=\"noreferrer noopener\"><u>posted on X<\/u><\/a>&nbsp;on Saturday shortly after the attacks that Iranian cyber forces usually use their \u201ccyberattack capability for psychological purposes.\u201d<\/p>\n\n\n\n<p>\u201cI\u2019m most concerned about cyber espionage against our leaders and surveillance aided by compromises in travel, hospitality, telecommunications, and other sectors where data could be used to identify and physically track persons of interest,\u201d Hultquist wrote.&#8221;<\/p>\n\n\n\n<p><a href=\"https:\/\/www.politico.com\/news\/2025\/06\/22\/us-israel-iran-war-cyber-attacks-00417782\">https:\/\/www.politico.com\/news\/2025\/06\/22\/us-israel-iran-war-cyber-attacks-00417782<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;Some of the most aggressive efforts over the past week have been cyberattacks against major financial institutions in Iran and disinformation campaigns aimed at causing chaos and confusion in Israel.<br \/>\nA pro-Israeli hacking group known as Predatory Sparrow claimed credit for a cyberattack last week on Iran\u2019s Bank Sepah, which caused widespread account issues for customers. The group also later claimed credit for draining around $90 million from Nobitex, Iran\u2019s largest cryptocurrency exchange, and for posting stolen Nobitex source code lists on the social media platform X.<\/p>\n<p>Hackers also targeted Iranian news stations. Videos circulated online appeared to show Iranian state TV broadcasting anti-regime messages last week.<\/p>\n<p>The Iranian government shut down the nation\u2019s internet in response to the attacks late last week, a blackout that was largely still ongoing on Sunday.<\/p>\n<p>\u201cGaining control of the flow of information is certainly to be expected from the regime \u2026 they suspect that there is maybe an attempt to mobilize public attention,\u201d Vatanka said.<\/p>\n<p>Top Iranian officials and their security teams were also advised last week to stop using internet-connected devices, in particular telecommunication devices, to protect against potential Israeli disruptions. Last year, thousands of pagers used by the Iranian proxy militant group Hezbollah exploded across Lebanon, leaving thousands injured.<\/p>\n<p>One reason Israel\u2019s cyberattacks may have been more effective in this round of fighting is that Israel struck Iranian facilities first, giving it more time to prepare its offensive and defensive options before Iran could retaliate.<\/p>\n<p>Iran and its proxy organizations are fighting back, albeit on a smaller scale. Israel\u2019s National Cyber Directorate warned Israelis abroad on Saturday not to fill out forms on malicious websites that are seeking to gather intelligence on these individuals.<\/p>\n<p>Gil Messing, chief of staff for Israeli cyber company Check Point Software, said Saturday just before the U.S. strikes that his company had tracked cyber and disinformation campaigns against Israel \u201cescalating a bit,\u201d though no new major attacks had been reported.<\/p>\n<p>Messing said that there was a \u201cflood of disinformation\u201d pouring onto social media last week, including messages discouraging Israelis from entering shelters during attacks and erroneous texts about gas and supply shortages.<\/p>\n<p>Israel\u2019s civilian cyber defense agency warned that Iran was renewing its efforts to hack into internet-connected cameras for espionage purposes.<\/p>\n<p>John Hultquist, chief analyst for Google Threat Intelligence Group, posted on X on Saturday shortly after the attacks that Iranian cyber forces usually use their \u201ccyberattack capability for psychological purposes.\u201d<\/p>\n<p>\u201cI\u2019m most concerned about cyber espionage against our leaders and surveillance aided by compromises in travel, hospitality, telecommunications, and other sectors where data could be used to identify and physically track persons of interest,\u201d Hultquist wrote.&#8221;<\/p>\n<p>https:\/\/www.politico.com\/news\/2025\/06\/22\/us-israel-iran-war-cyber-attacks-00417782<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[13],"tags":[552,412,314,612,156,194,391,1005,158],"class_list":["post-18298","post","type-post","status-publish","format-standard","hentry","category-article-share","tag-conflict","tag-cyber","tag-international-relations","tag-internet","tag-iran","tag-israel","tag-middle-east","tag-technology","tag-war"],"_links":{"self":[{"href":"https:\/\/lonecandle.com\/index.php?rest_route=\/wp\/v2\/posts\/18298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lonecandle.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lonecandle.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lonecandle.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lonecandle.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18298"}],"version-history":[{"count":1,"href":"https:\/\/lonecandle.com\/index.php?rest_route=\/wp\/v2\/posts\/18298\/revisions"}],"predecessor-version":[{"id":18299,"href":"https:\/\/lonecandle.com\/index.php?rest_route=\/wp\/v2\/posts\/18298\/revisions\/18299"}],"wp:attachment":[{"href":"https:\/\/lonecandle.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lonecandle.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lonecandle.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}