Cyberattack on Bank

Hacktivist Group Claims Attack on Iran's Bank Sepah Amidst Rising Tensions

Security

A group known as Predatory Sparrow, or Gonjeshke Darande in Persian, has asserted responsibility for a cyberattack targeting Iran's Bank Sepah. The claim, made via a post on X, alleges that the attack resulted in the destruction of critical data belonging to the Islamic Revolutionary Guard Corps' (IRGC) Bank Sepah.

Predatory Sparrow has accused Bank Sepah of being instrumental in bypassing international sanctions and funneling Iranian funds to support activities such as "the regime's terrorist proxies, its ballistic missile program, and its military nuclear program." This is a serious claim that, if substantiated, highlights the complex role of financial institutions in international politics and conflict.

Reports from Iran International, an independent news outlet, indicate that the purported cyberattack has led to widespread banking disruptions across Iran. Several Bank Sepah branches were reportedly closed, and customers have reported being unable to access their accounts. Aerie Oseran, a correspondent for i24NEWS, even shared images of ATMs displaying error messages, further fueling speculation about the severity of the situation.

While independent verification of the cyberattack remains elusive, the timing of the alleged incident is particularly noteworthy. It coincides with escalating tensions between Israel and Iran, marked by reciprocal attacks targeting sensitive sites, including nuclear facilities and military bases. This raises questions about the potential motives and affiliations behind Predatory Sparrow's actions.

It remains unclear who is actually behind Predatory Sparrow. However, the group's actions suggest a pro-Israel, or at least anti-Iran, stance. It has a history of targeting Iranian organizations and companies for years. Cybersecurity analysts like John Hultquist from Google's Mandiant believe the group has made credible claims in the past. "Despite appearances this actor is not all bluster," Hultquist wrote on X, highlighting the potential capabilities and impact of Predatory Sparrow.

Similarly, Rob Joyce, a former NSA official and Biden administration member, has pointed out that Predatory Sparrow's previous attacks on Iranian steel plants and gas stations have had "tangible effects in Iran." These prior incidents, which include an alleged explosive fire at a steel plant and widespread disruption to gas stations, demonstrate the group's capacity to inflict real-world consequences through its cyber operations.

Source: TechCrunch