Pro-Israel Hackers Steal $90 Million from Iran's Nobitex Exchange

Hackers, identified as the pro-Israel group "Predatory Sparrow," executed a cyberattack on Iran's largest cryptocurrency exchange, Nobitex, resulting in the theft of approximately $90 million. The hackers claimed that the exchange was used by Iran to evade international sanctions. In an unusual move, the hackers transferred the stolen cryptocurrency to digital wallets that they do not control, effectively rendering the funds inaccessible. This action was confirmed by multiple cybersecurity experts.

Nobitex acknowledged the incident and temporarily suspended access to the exchange as a precautionary measure. The stolen cryptocurrency was sent to various wallets, with some of the transactions containing derogatory references to Iran's Islamic Revolutionary Guard Corps (IRGC). This cyberattack follows a previous incident where Predatory Sparrow targeted Iran’s state-owned Bank Sepah, destroying data and claiming that IRGC members used the bank's services.

The cyberattacks mark a significant escalation in the ongoing shadow war between Israel and Iran, which has seen both sides engage in digital spying and data-destroying attacks. Predatory Sparrow, which has been active for the past five years, has previously disrupted an Iranian steel mill and payments at Iranian gas stations. While the group portrays itself as anti-government Iranian hacktivists, cybersecurity experts widely suspect ties to Israel.

The impact of these cyberattacks extends beyond the targeted institutions. Many ordinary Iranians rely on cryptocurrency due to the country's shrinking access to financial resources and the ongoing conflict with Israel. The recent cyber activity, including the hack on Nobitex, appears aimed at sowing panic and disrupting daily life in both countries. For instance, Israelis have received mass text messages impersonating authorities, claiming that bomb shelters are not safe. Meanwhile, the Iranian government has warned citizens against using the WhatsApp messaging service, citing fears of Israeli information collection, although these claims have been denied by Meta, the owner of WhatsApp.

The cyberattacks on Nobitex and Bank Sepah highlight the evolving tactics in the digital conflict between Israel and Iran. The use of cryptocurrency exchanges as targets underscores the growing importance of digital assets in global financial systems and the potential vulnerabilities they present. As both nations continue to engage in cyber warfare, the impact on civilian populations and financial stability remains a significant concern.