Bank Sepah’s website is offline following a hacktivist group’s claimed attack on the Iran state-owned bank. The group, known as Predatory Sparrow — or Gonjeshke Darande in Persian — said in a social media post early Tuesday that it “destroyed the data of the Islamic Revolutionary Guard Corps’ Bank Sepah.”
Iran-focused media outlets report Bank Sepah branches are closed, customers are unable to access accounts and payment processing is down. London-based Iran International said Iran’s Fars News Agency confirmed Bank Sepah’s infrastructure was impacted by a cyberattack, resulting in service disruptions.
The attack on one of Iran’s largest financial institutions highlights the growing role of cyber warfare in the escalating conflict between Israel and Iran, and has had immediate consequences for the country’s critical infrastructure.
Israel on Thursday initiated a massive aerial bombing campaign, targeting Iran’s military systems and leadership, with devastating impact. The countries have been engaged in an ongoing military conflict, which so far has been limited to airstrikes.
“Any cyber response to this whole episode is probably going to take time. There’s likely to be significant cyber activity, but it may take some time for these operations to spin up,” John Hultquist, chief analyst at Google Threat Intelligence Group, told CyberScoop.
This is why some threat groups such as the China state-sponsored Volt Typhoon and others do long-term probing on networks, prepositioning themselves to strike critical infrastructure at a time of military conflict or other geopolitical opportunity, Hultquist added.
Predatory Sparrow said it targeted the bank because it “circumvented international sanctions and used the people of Iran’s money to finance the regime’s terrorist proxies, its ballistic missile program and its military nuclear program.”
The hacktivist group previously claimed attacks on steel mills in Iran, the country’s rail system network and gas station payment systems. Predatory Sparrow’s country of origin isn’t clear, but the group has consistently acted against the Iranian regime and in support of Israel’s objectives in Iran.
“They have carried out serious attacks that reflect real skill and sophistication,” Hultquist said.
Iran’s military merged multiple state-owned banks into Bank Sepah in 2020. Bank Sepah International, a London-based subsidiary of Bank Sepah, did not immediately respond to a request for comment. The Central Bank of the Islamic Republic of Iran’s website is also currently offline.
The post Iran’s Bank Sepah disrupted by cyberattack claimed by pro-Israel hacktivist group appeared first on CyberScoop.