Pro-Israel Hacktivist Group Claims Responsibility for Alleged Cyber Attack on Iranian Bank
On Tuesday, the pro-Israeli hacktivist group Predatory Sparrow reported that it had successfully infiltrated and disabled Iran’s Bank Sepah.
This collective, also known by its Persian name Gonjeshke Darande, claimed responsibility for the operation via X.
“We, ‘Gonjeshke Darande,’ launched cyberattacks that decimated the data of the Islamic Revolutionary Guard Corps’ ‘Bank Sepah,’” the group stated.
They contended that Bank Sepah is a financial institution that “circumvents international sanctions and misappropriates the funds of the Iranian people to support terrorism, ballistic missile projects, and military nuclear activities.”
Contact Us
Do you possess further information about Predatory Sparrow? Or other hacking groups operating in Israel and Iran? From a secure, non-work device and network, you can contact Lorenzo Franceschi-Bicchierai through Signal at +1 917 257 1382, on Telegram and Keybase @lorenzofb, or via email.
According to the independent news outlet Iran International, there are signs of “significant banking disruptions” across the nation. The publication indicated that several Bank Sepah branches were closed on Tuesday, with customers experiencing issues accessing their accounts.
Aerie Oseran, a reporter for i24NEWS, shared images of ATMs in Iran displaying error messages.
TechCrunch has been unable to verify the group’s claims about the cyberattack independently. Attempts to contact two Bank Sepah email addresses in Iran resulted in error messages. The bank’s branches in the U.K. and Italy have not yet responded to our inquiries.
Predatory Sparrow has not replied to messages sent to their X account or via Telegram.
This purported cyber offensive against Bank Sepah occurs amid rising tensions, as Israel and Iran engage in mutual bombings—a conflict that escalated after Israel began targeting Iranian nuclear installations, military facilities, and senior military figures last Friday.
The identities behind Predatory Sparrow remain unclear. The group positions itself as a pro-Israel organization or, at minimum, as an anti-Iran hacktivist collective, having targeted Iranian firms and institutions for several years. Cybersecurity experts suggest that the group has been successful in past operations and has made credible assertions.
“Despite appearances, this actor is not just bluster,” remarked John Hultquist, chief analyst at Google’s Mandiant, on X.
Rob Joyce, a former NSA and Biden administration official, noted, “Predatory Sparrow’s earlier cyberattacks on Iranian steel mills and gas stations have had significant repercussions in Iran.”
Among Predatory Sparrow’s most prominent alleged attacks was on a steel plant, which reportedly caused a major explosion, and disruptions to Iran’s gas stations, affecting citizens trying to refuel their vehicles.
