Iran crypto exchange hit by hackers, over $100m destroyed
TEHRAN - An anti-Iranian hacking group with possible ties to Israel announced an attack on one of Iran's largest cryptocurrency exchanges on June 18, destroying nearly US$90 million (S$115 million) and threatening to expose the platform's source code.
A group known as Gonjeshke Darande, or 'Predatory Sparrow,' claimed the attack, making it the group's second operation in two days.
On June 17, the group claimed to have destroyed data at Iran's state-owned Bank Sepah, amid the increasing hostilities and missile attacks between Israel and Iran.
The June 18 attack targeted Nobitex, one of Iran's largest cryptocurrency exchanges.
The platform allegedly helps the Iranian government avoid sanctions and finance illicit operations around the world, the hackers claimed in a message posted to its social media channels early on June 18.
Nobitex's website was unavailable on June 18.
Messages sent to the company's support channel on Telegram were not returned.
The Gonjeshke Darande group did not respond to requests for comment.
Nobitex said in a post on X that it had pulled its website and app offline as it reviewed 'unauthorised access' to its systems.
Gonjeshke Darande is an established hacking group with a history of sophisticated cyberattacks targeting Iran.
A 2021 operation claimed by the group caused widespread gas station outages, while a 2022 attack targeting an Iranian steel mill caused a large fire and tangible, offline damage.
Israel has never formally acknowledged that it is behind the group, although Israeli media has widely reported Gonjeshke Darande as 'Israel-linked'.
The June 18 attack started in the early hours of the morning when funds were moved to hacker-controlled wallets denouncing the Islamic Revolutionary Guard Corps (IRGC), according to blockchain analysis firm TRM Labs, which pegged the total theft at about US$90 million across multiple types of cryptocurrencies.
The way the hacker-controlled wallets were created suggests the hackers would not be able to access the stolen money, meaning that the hackers 'effectively burned the funds in order to send Nobitex a political message,' blockchain analysis firm Elliptic said in a blog post.
Elliptic's post shared evidence that Nobitex had sent and received funds to cryptocurrency wallets controlled by groups hostile to Israel, including Palestinian Islamic Jihad, Hamas and Yemen's Houthis.
Senators Elizabeth Warren and Angus King had raised concerns about Nobitex's role in enabling Iranian sanctions evasion in a May 2024 letter to top Biden administration officials, citing Reuters' reporting from 2022.
Mr Andrew Fierman, head of national security intelligence with Chainalysis, confirmed in an email to Reuters that the value of the attack was roughly US$90 million and that it was likely geopolitically motivated, given that the money was burned.
Chainalysis has 'previously seen IRGC-affiliated ransomware actors leveraging Nobitex to cash out proceeds, and other IRGC proxy groups leveraging the platform,' Mr Fierman said. REUTERS
Join ST's Telegram channel and get the latest breaking news delivered to you.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Straits Times
an hour ago
- Straits Times
New Zealand halts Cook Islands funding over China row
A spokesperson for New Zealand Foreign Minister Winston Peters (pictured) said the country's core sector support funding relies on a high trust bilateral relationship. PHOTO: REUTERS WELLINGTON - New Zealand announced on June 19 it was suspending NZ$18.2 million (S$14.1 million) in budget funding to the Cook Islands, as the relationship between the two constitutionally linked countries continues to deteriorate amid the Cook Islands' deepening ties with China. A spokesperson for New Zealand Foreign Minister Winston Peters said in a statement that the country's core sector support funding relies on a high trust bilateral relationship and New Zealand decided in early June to pause the funding. We "will also not consider significant new funding until the Cook Islands Government takes concrete steps to repair the relationship and restore trust," the spokesperson said. "New Zealand hopes that steps will be taken swiftly to address New Zealand's concerns so that this support can be resumed as soon as possible." New Zealand along with Australia has become increasingly cautious about China's growing presence in the Pacific region and the potential threats it poses to the country's national security. In January, the government halted new development funding to the Republic of Kiribati, an island in Micronesia. The Cook Islands is a self-governing country in free association with New Zealand. New Zealand commits to defend the South Pacific nation if asked, Cook Islanders are New Zealand citizens, and the two countries commit to consult on security, defence and foreign policy issues. Over the past three years, New Zealand has provided NZ$194.2 million to the Cook Islands through the development programme, according to the government. In February, Cook Islands Prime Minister Mark Brown visited China and signed a strategic partnership that spanned areas from deep-sea mining to education scholarships but excluded security ties. This concerned New Zealand, which says the Cook Islands did not properly consult on the documents ahead of the signing, which breached the arrangement between the two countries. The Cook Islands government had not responded to a request for comment at the time of publishing. The New Zealand government said Mr Brown was told of the decision in early June by letter. Mr Peters' spokesperson said that the agreements signed by the Cook Islands and China and the lack of consultation with New Zealand about them, illustrate a gap in understanding between the Cook Islands and New Zealand governments about what their special relationship of free association requires. "Trust and meaningful engagement are fundamental to free association," he said. REUTERS Join ST's Telegram channel and get the latest breaking news delivered to you.
Straits Times
an hour ago
- Straits Times
Microsoft planning thousands more job cuts aimed at salespeople: Sources
The job cuts would be Microsoft's latest move to trim its workforce amid heavy spending on artificial intelligence. PHOTO: AFP NEW YORK – Microsoft is planning to ax thousands of jobs, particularly in sales, as part of the company's latest move to trim its workforce amid heavy spending on artificial intelligence (AI). The cuts are expected to be announced early in July, following the end of Microsoft's fiscal year, according to people familiar with the matter. The reductions won't exclusively affect sales teams, and the timing could still change, said the people, who requested anonymity to discuss a private matter. The company declined to comment. The terminations would follow a previous round of layoffs in May that hit 6,000 people and fell hardest on product and engineering positions, largely sparing customer-facing roles like sales and marketing. In April, Microsoft told employees it planned to use third-party firms to handle more sales of software to small and mid-size customers. The tech giant has ramped up its investments in AI, aiming to solidify its leadership as companies across industries accelerate the integration of AI into their products and services to maintain a competitive edge. Amazon chief executive Andy Jassy said on June 17 that the rollout of generative AI and agents will reduce its total corporate workforce in the next few years. Microsoft has planned a capital expenditure of US$80 billion (S$102.8 billion) this fiscal year, with most of it aimed at expanding data centres to ease capacity bottlenecks for AI services. The company had 228,000 workers at the end of June 2024, 45,000 of them in sales and marketing. Microsoft often restructures teams and announces other changes near the end of its fiscal year, which closes in June. BLOOMBERG, REUTERS Join ST's Telegram channel and get the latest breaking news delivered to you.
Business Times
an hour ago
- Business Times
Airbus hits US$21 billion orders at Paris Air Show as Boeing focuses on India crash
[PARIS] Airbus secured more aircraft orders on Wednesday, raising its total to US$21 billion at this week's subdued Paris Air Show, while rival Boeing opted not to announce new sales following last week's Air India 787 crash. Airbus firmed up an order for 10 long-haul jets from Taiwan's Starlux Airlines in a boost for the European planemaker after one of its biggest customers, AirAsia, dashed expectations of another grand finale matching its earlier expansion. Airbus won a total of 148 firm orders worth US$14.2 billion including six previous ones disclosed publicly for the time, plus 102 provisional orders worth US$6.7 billion, according to estimated delivery prices from UK-based Cirium Ascend. Delegates had been bracing for a more muted show than usual after Boeing struck huge deals during US President Donald Trump's recent trip to the Middle East. The US jetmaker then scaled back its presence at the show to focus on the probe into last week's deadly crash of an Air India Boeing 787. But Europe's Airbus has been steadily racking up business, and underscored confidence about growing demand by holding out the prospect of higher dividends. It prefaced each show announcement with sympathies for India victims, however. 'It is an air show with a regrettable tragedy that has affected all of us,' Airbus planemaking CEO Christian Scherer told Reuters. BT in your inbox Start and end each day with the latest news stories and analyses delivered straight to your inbox. Sign Up Sign Up Despite the sombre tone, talk was rife before and during the event at Le Bourget outside Paris that Airbus might seal a major deal with AirAsia to add a final flourish to the gathering. Airline entrepreneur Tony Fernandes, the CEO of AirAsia owner Capital A Group, told Reuters that it was in talks to buy 50 to 70 A321XLR jetliners, and 100 A220s or competing E2 regional jets from Brazil's Embraer. But he played down the chances of a deal in Paris, saying the first priority was to complete the group's restructuring. 'We're still doing a lot of work with Airbus and other (manufacturers) .... I think we'll look to do something imminently, in the next 1-3 months,' he said in an interview. Two industry sources said Airbus had made an 'aggressive' offer to boost A220 orders and win a launch customer for a new 160-seat version but that talks stalled over financing. Another said it would be natural to resume discussions around July when the company expects to exit its financial troubles. 'Different show' Embraer said on Wednesday it had secured an order for 60 of its E175 regional jets from SkyWest Airlines, which also agreed purchase rights for a further 50 of the aircraft. Airbus announced an order for two A350 freighters from logistics company MNG Airlines, and EgyptAir was unveiled as the previously-undisclosed buyer of six A350-900 long-haul jets. Planemakers have been struggling to keep up with demand for new, more fuel-efficient aircraft since the end of pandemic-era travel restrictions, with supply chain problems - particularly with engines - delaying some deliveries. Airbus said on Wednesday, however, that since early 2025 it had experienced 40 per cent fewer disruptions caused by delayed components at its production facilities. 'It has been a very different air show from those we have seen in the past, which have tended to be wall-to-wall aircraft orders,' Agency Partners analyst Sash Tusa said. 'Civil orders have been affected by .... Boeing being very careful about how they announce or don't announce things,' he said. In another shift, he said, Airbus focused on securing public backing for planes that could benefit from more orders like the A220, rather than its heavily sold-out A320neo family. On the defence side of the show, US drone maker Anduril and Germany's Rheinmetall said they would partner to build aerial drones for European markets, in a sign of Europe leveraging US technology to boost military capabilities. REUTERS
