Iran Crypto Exchange Hit By Hackers, $90 Million Destroyed
An anti-Iranian hacking group with possible ties to Israel announced an attack on one of Iran's largest cryptocurrency exchanges on Wednesday, destroying nearly $90 million and threatening to expose the platform's source code.
A group known as Gonjeshke Darande, or "Predatory Sparrow," claimed the attack, making it the group's second operation in two days. On Tuesday the group claimed to have destroyed data at Iran's state-owned Bank Sepah amid the increasing hostilities and missile attacks between Israel and Iran.
Wednesday's attack targeted Nobitex, one of Iran's largest cryptocurrency exchanges. The platform allegedly helps the Iranian government avoid sanctions and finance illicit operations around the world, the hackers claimed in a message posted to its social media channels early Wednesday.
Nobitex's website was unavailable Wednesday. Messages sent to the company's support channel on Telegram were not returned. Gonjeshke Darande did not respond to requests for comment.
Nobitex said in a post on X that it had pulled its website and app offline as it reviewed "unauthorized access" to its systems.
Gonjeshke Darande is an established hacking group with a history of sophisticated cyberattacks targeting Iran. A 2021 operation claimed by the group caused widespread gas station outages, while a 2022 attack targeting an Iranian steel mill caused a large fire and tangible, offline damage.
Israel has never formally acknowledged that it is behind the group, although Israeli media has widely reported Gonjeshke Darande as "Israel-linked."
Wednesday's attack started in the early hours of the morning when funds were moved to hacker-controlled wallets denouncing the Islamic Revolutionary Guard Corps (IRGC), according to blockchain analysis firm TRM Labs, which pegged the total theft at about $90 million across multiple types of cryptocurrencies.
The way the hacker-controlled wallets were created suggests the hackers would not be able to access the stolen money, meaning that the hackers "effectively burned the funds in order to send Nobitex a political message," blockchain analysis firm Elliptic said in a blog post.
Elliptic's post shared evidence that Nobitex had sent and received funds to cryptocurrency wallets controlled by groups hostile to Israel, including Palestinian Islamic Jihad, Hamas and Yemen's Houthis.
Senators Elizabeth Warren and Angus King had raised concerns about Nobitex's role in enabling Iranian sanctions evasion in a May 2024 letter to top Biden administration officials, citing Reuters' reporting from 2022.
Andrew Fierman, head of national security intelligence with Chainalysis, confirmed in an email to Reuters that the value of the attack was roughly $90 million and that it was likely geopolitically motivated, given that the money was burned.
Chainalysis has "previously seen IRGC-affiliated ransomware actors leveraging Nobitex to cash out proceeds, and other IRGC proxy groups leveraging the platform," Fierman said.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
&w=3840&q=100)
First Post
16 minutes ago
- First Post
After hacking govt bank, Israeli cyberattackers steal $90 million from Iran's crypto exchange
An Israeli group of cyberattackers called 'Predatory Sparrow' have taken responsibility for the attack as the country tries to infiltrate internal systems of Iran to further weaken its position amid conflict with Israel read more Representations of cryptocurrency Binance are seen in front of displayed Nobitex logo and Iran flag in this illustration taken November 3, 2022. REUTERS Israeli hackers have reportedly stolen at least $90 million from Iran's largest cryptocurrency exchange, several crypto tracking firms have reported. An Israeli group of cyberattackers called 'Predatory Sparrow' have taken responsibility for the attack as the country tries to infiltrate internal systems of Iran to further weaken its position amid conflict with Israel. Which exchange was affected? In a post on X written in Farsi, the hackers claimed responsibility for targeting the Iranian crypto exchange Nobitex, alleging it was used by Iran to evade international sanctions. In an unusual move, they may have effectively discarded the stolen cryptocurrency by transferring it to digital wallets they cannot access, according to multiple cybersecurity experts. STORY CONTINUES BELOW THIS AD Nobitex has acknowledged the attacks, adding a note for investors that it has 'suspended' crypto-related activities as a precaution. Crypto-tracking firms like Elliptic and TRM Labs have confirmed the cyberattacks on Nobitex and said that the stolen currencies were sent to wallets or crypto accounts. Iran's state-owned bank hacked An anti-Iranian government hacking group with potential ties to Israel and a track record of destructive cyberattacks on Iran claimed in social media posts on Tuesday that it had destroyed data at Iran's state-owned Bank Sepah. The same group hacked the bank because they accused it of helping fund Iran's military, according to one of the messages posted online. The hack comes amid increasing hostilities between Israel and Iran, after Israel attacked multiple military and nuclear targets in Iran last week. Both sides have launched multiple missile attacks against each other in the days since. Customers were having problems accessing their accounts, according to Israeli media, opens new tab. 'Disrupting the availability of this bank's funds, or triggering a broader collapse of trust in Iranian banks, could have major impacts there,' Rob Joyce, the former top cybersecurity official at the NSA, said in a post on X. With inputs from Reuters
Time of India
26 minutes ago
- Time of India
Malaysia obtains local court order against Telegram for allegedly spreading harmful content
Malaysia's communications regulator said on Thursday it has obtained a temporary court order against messaging service Telegram and two channels on the platform for allegedly disseminating content that violates the country's law. The Malaysian Communications and Multimedia Commission said it sought the court order against Telegram following the platform's "serious failure to address content that has been repeatedly reported to it". It said the content on the two channels on Telegram, named "Edisi Siasat" and "Edisi Khas", had "the potential to undermine public trust in national institutions and disrupt societal harmony". A Malaysian high court granted an interim injunction order to halt the spread of the harmful content and prevent the re-publication of similar content, the commission said. It did not describe the nature of the harmful content. Telegram did not immediately respond to a request for comment. Live Events "Telegram will be given a fair opportunity to present its defence in line with the principles of justice and fundamental rights", the commission said in a statement. Discover the stories of your interest Blockchain 5 Stories Cyber-safety 7 Stories Fintech 9 Stories E-comm 9 Stories ML 8 Stories Edtech 6 Stories In January, Malaysia introduced a new social media law requiring social media platforms and messaging services with more than 8 million users in Malaysia to obtain a licence or face legal action. The law is aimed at tackling rising cybercrime following a sharp increase in harmful social media content. Malaysian authorities deem online gambling, scams, child pornography and grooming, cyberbullying and content related to race, religion and royalty as harmful.
Time of India
29 minutes ago
- Time of India
Sensex falls over 100 pts, Nifty below 24,800; IT, banking stocks drag on Fed cues
Indian benchmark equity indices opened lower for the third straight session on Thursday, weighed down by losses in IT and banking stocks amid hawkish signals from the US Federal Reserve and ongoing geopolitical tensions in the Middle East. The BSE Sensex was down 153 points, or 0.19%, at 81,287, while the Nifty50 slipped 56 points, or 0.23%, to 24,754 around 9:19 am. Broader Asian markets also traded in the red, with the MSCI Asia ex-Japan index falling 0.8%. On Wall Street, US equities closed mostly flat after the Federal Reserve kept interest rates unchanged but signalled a more gradual pace of rate cuts—now projecting only two reductions by the end of the year. Fed Chair Jerome Powell warned that goods inflation could rise over the summer, partly due to tariffs associated with US President Donald Trump's trade stance. The prospect of a slower monetary easing cycle has dampened foreign investor appetite for emerging market assets, including Indian equities. At the same time, geopolitical risks remain elevated. The Israel-Iran conflict entered its seventh day, with Iranian Supreme Leader Ayatollah Ali Khamenei rejecting Trump's demand for unconditional surrender. In response, Trump said his patience had run out and warned of unpredictable consequences. Live Events Meanwhile, from the Sensex stocks, Tech Mahindra, Adani Ports, IndusInd Bank, HCL Tech, Infosys, and TCS were the top laggards, falling up to 2%. On the other hand, Titan, M&M, Kotak Mahindra Bank, Tata Motors, and Eternal opened with gains. Among individual stocks, ESAF Small Finance Bank soared over 11% after the lender said its board has approved the sale of a pool of non-performing and technically written-off loans worth Rs 735.18 crore to an asset reconstruction company (ARC). Shares of Reliance Infrastructure also rallied over 4% after the Anil Ambani-led company announced a strategic partnership with French aerospace major Dassault Aviation. Its subsidiary, Reliance Aerostructure, will collaborate with Dassault to manufacture Falcon 2000 business jets in India. On the Sectoral front, Nifty IT fell 0.7%, dragged by Tech Mahindra, LTIMindtree, and Infosys. Nifty Metal and Nifty PSU Bank were also in the red, down 0.45% and 0.3%, respectively. In the broader market, the Nifty Midcap 100 traded flat, while the Nifty Smallcap 100 edged up 0.2%. Experts View "The 24500-25000 range for the Nifty is likely to hold till news from the Israel-Iran conflict change for the better or for the worse. If news of deescalation of tensions break, Nifty will break out of the upper band of the range. If the news is about escalation of tensions, particularly relating to troubles in the strait of Hormuz resulting in sharp spike in crude, it would be difficult for Nifty to hold on to the 24500 support level," said Dr. VK Vijayakumar, Chief Investment Strategist, Geojit Investments . "The Fed decision and commentary have come on expected lines. Jerome Powell's comment that ' despite heightened uncertainty the economy is in solid position ' is important. However, he has warned that 'tariff effects on inflation can be persistent'. Therefore, it would be realistic not to expect rate cuts from the Fed immediately. The dot plot, however, indicates two rate cuts in 2025. With only 1.4% GDP growth expected this year, the US is unlikely to attract a lot of capital flows. This is favourable for India," Vijayakumar added. Mandar Bhojane, Research Analyst at Choice Broking, said, "For the Nifty 50, key support is seen at 24,600, followed by 24,400 and 24,200. On the upside, resistance levels are placed at 25,000 and 25,200. A breakout above 25,200 may lead to a fresh rally, while a drop below 24,500 could trigger short-term selling pressure." Global Markets Stock markets in Asia edged lower on Thursday while safe havens such as gold and the Japanese yen gained as investors remained on edge over the possible entry of the United States into the week-old Israel-Iran air war. Japan's Nikkei sank 0.8%, with additional downward pressure stemming from a stronger yen, which reduces the value of overseas revenues for the country's heavyweight exporters. Taiwan's stock benchmark slid 0.9%, and Hong Kong's Hang Seng declined 0.8%. U.S. S&P 500 futures pointed 0.4% lower, although most U.S. markets - including Wall Street and the Treasury market - are closed on Thursday for a national holiday. FII/DII Tracker Foreign Institutional Investors (FIIs) were net buyers on June 18, purchasing equities worth Rs 890 crore. Domestic Institutional Investors (DIIs) also remained buyers, investing Rs 1,091 crore during the session. MORE TO COME...
