The Israel-linked hacker group Predatory Sparrow has been conducting destructive cyberattacks on Iran, targeting its financial system.
They recently attacked the Iranian crypto exchange Nobitex, destroying over $90 million in holdings and accusing the exchange of supporting terrorism and violating sanctions.
In a separate attack on Iran's Sepah bank, they claimed to have destroyed all the bank's data, citing associations with the Islamic Revolutionary Guard Corps.
The cyberattacks have caused disruptions, with reports suggesting Sepah's online banking and ATMs being offline, affecting civilians' access to funds.
Predatory Sparrow's sabotage involved moving stolen funds to crypto addresses with politically charged titles to effectively 'burn' the money.
Blockchain analysis revealed links between Nobitex and sanctioned groups, showing the exchange's involvement in evading sanctions through cryptocurrency.
The group, potentially linked to Israel's military or intelligence agencies, has a history of targeting Iran's critical infrastructure and conducting destructive attacks.
The motives behind Predatory Sparrow's focus on Iran's financial sector remain unclear, indicating possible future cyber warfare actions with serious consequences.
The group's capabilities and past actions make them a significant threat, with the potential to follow through on their cyber threats.
The situation highlights the escalating cyber warfare dynamics between various state-sponsored and hacktivist groups.