The situation in Iran continues to deteriorate following a series of cyberattacks carried out by the Israeli hacker group Gonjeshke Darande. These attacks have impacted both government banks and popular cryptocurrency exchanges, sparking widespread public reaction.
Attack on Bank Sepah
On June 17, 2025, the Predatory Sparrow group launched a targeted cyberattack on the state-owned Bank Sepah, disrupting its online services, ATMs, and internal systems. The attack left millions of customers unable to access their accounts. According to [sources](https://www.axios.com/2025/06/17/iran-bank-sepah-cyberattack-israel), the hackers infiltrated the bank's servers, erasing critical financial data and causing chaos in Iran's banking sector.
Crypto Heist at Nobitex
Following the bank attack, on June 18, 2025, Predatory Sparrow targeted Nobitex, Iran’s largest cryptocurrency exchange. The hackers exploited vulnerabilities in Nobitex’s hot wallets, siphoning off over $90 million in cryptocurrencies, including Bitcoin, Ethereum, and others. The stolen funds were transferred to addresses containing a political message, confirming the hackers' intentions. These incidents left Nobitex's website offline for its 7 million users.
Political Implications of Cyberattacks
The attacks on Iran’s financial institutions have serious political implications, affecting public opinion and the country's relations with the international community. Despite attempts by Iranian authorities to downplay the impact, independent analysts suggest that restoring full banking operations could take weeks, further exacerbating the already fragile economic situation under international sanctions.
The cyberattacks carried out by the Gonjeshke Darande group illustrate the growing significance of cyber warfare in contemporary geopolitical conflicts. Iran faces the daunting task of rebuilding its financial systems while bracing for potential further attacks.
