Iran crypto exchange hit by hackers, over $100m destroyed
TEHRAN - An anti-Iranian hacking group with possible ties to Israel announced an attack on one of Iran's largest cryptocurrency exchanges on June 18, destroying nearly US$90 million (S$115 million) and threatening to expose the platform's source code.
A group known as Gonjeshke Darande, or 'Predatory Sparrow,' claimed the attack, making it the group's second operation in two days.
On June 17, the group claimed to have destroyed data at Iran's state-owned Bank Sepah, amid the increasing hostilities and missile attacks between Israel and Iran.
The June 18 attack targeted Nobitex, one of Iran's largest cryptocurrency exchanges.
The platform allegedly helps the Iranian government avoid sanctions and finance illicit operations around the world, the hackers claimed in a message posted to its social media channels early on June 18.
Nobitex's website was unavailable on June 18.
Messages sent to the company's support channel on Telegram were not returned.
The Gonjeshke Darande group did not respond to requests for comment.
Nobitex said in a post on X that it had pulled its website and app offline as it reviewed 'unauthorised access' to its systems.
Gonjeshke Darande is an established hacking group with a history of sophisticated cyberattacks targeting Iran.
A 2021 operation claimed by the group caused widespread gas station outages, while a 2022 attack targeting an Iranian steel mill caused a large fire and tangible, offline damage.
Israel has never formally acknowledged that it is behind the group, although Israeli media has widely reported Gonjeshke Darande as 'Israel-linked'.
The June 18 attack started in the early hours of the morning when funds were moved to hacker-controlled wallets denouncing the Islamic Revolutionary Guard Corps (IRGC), according to blockchain analysis firm TRM Labs, which pegged the total theft at about US$90 million across multiple types of cryptocurrencies.
The way the hacker-controlled wallets were created suggests the hackers would not be able to access the stolen money, meaning that the hackers 'effectively burned the funds in order to send Nobitex a political message,' blockchain analysis firm Elliptic said in a blog post.
Elliptic's post shared evidence that Nobitex had sent and received funds to cryptocurrency wallets controlled by groups hostile to Israel, including Palestinian Islamic Jihad, Hamas and Yemen's Houthis.
Senators Elizabeth Warren and Angus King had raised concerns about Nobitex's role in enabling Iranian sanctions evasion in a May 2024 letter to top Biden administration officials, citing Reuters' reporting from 2022.
Mr Andrew Fierman, head of national security intelligence with Chainalysis, confirmed in an email to Reuters that the value of the attack was roughly US$90 million and that it was likely geopolitically motivated, given that the money was burned.
Chainalysis has 'previously seen IRGC-affiliated ransomware actors leveraging Nobitex to cash out proceeds, and other IRGC proxy groups leveraging the platform,' Mr Fierman said. REUTERS
Join ST's Telegram channel and get the latest breaking news delivered to you.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Business Times
16 minutes ago
- Business Times
Walmart to pay US$10 million to settle US FTC lawsuit over money transfer fraud
[NEW YORK] Walmart has agreed to pay US$10 million to settle a US Federal Trade Commission (FTC) civil lawsuit accusing the world's largest retailer of ignoring warning signs that fraudsters used its money transfer services to fleece consumers out of hundreds of millions of US dollars. The settlement was filed on Friday (Jun 20) in Chicago federal court, and requires approval by US District judge Manish Shah. Walmart also agreed not to process money transfers it suspects are fraudulent, or help sellers and telemarketers it believes are using its services to commit fraud. 'Electronic money transfers are one of the most common ways that scammers tell consumers to send them money, because once it's sent, it's gone for good,' said Christopher Mufarrige, director of the FTC's consumer protection bureau. 'Companies that provide these services must train their employees to comply with the law and work to protect consumers.' The Bentonville, Arkansas-based retailer did not admit or deny wrongdoing in agreeing to settle. Walmart said that it was pleased to settle and shared the FTC's goal of protecting consumers from fraudsters, including from fraud-induced money transfers. BT in your inbox Start and end each day with the latest news stories and analyses delivered straight to your inbox. Sign Up Sign Up In its June 2022 complaint, the FTC accused Walmart of turning a blind eye to fraudsters who used its money transfer services to cash out at its stores. Walmart acts as an agent for money transfers by companies such as MoneyGram, Ria and Western Union. Money can be hard to trace once delivered. The FTC said fraudsters used many schemes that included impersonating Internal Revenue Service agents, impersonating family members who needed money from grandparents to avoid jail, and telling victims they won lotteries or sweepstakes but owed fees to collect their winnings. Shah dismissed part of the FTC case last July but let the regulator pursue the remainder. Walmart appealed from that decision. Friday's settlement would end the appeal. REUTERS
Straits Times
25 minutes ago
- Straits Times
Trump floats firing ‘numbskull' Fed chair Jerome Powell
Mr Jerome Powell's term as chairman of the US Federal Reserve does not conclude until next year. PHOTO: REUTERS WASHINGTON - US President Donald Trump escalated his criticism of Federal Reserve Chair Jerome Powell on June 20 – publicly mulling whether to fire the official and appoint himself to the central bank. The Republican leader, who regularly berates Mr Powell over the bank's decisions not to lower interest rates, took to Truth Social to smear the banker as a 'numbskull,' 'moron' and 'obvious Trump Hater'. 'I fully understand that my strong criticism of him makes it more difficult for him to do what he should be doing, lowering Rates, but I've tried it all different ways,' said Mr Trump, who appointed Mr Powell during his first term. 'I've been nice, I've been neutral, and I've been nasty, and nice and neutral didn't work!' Mr Powell's term does not conclude until next year. He has said his dismissal would be unlawful, and that he has no intention of stepping down voluntarily if Mr Trump asks. 'I don't know why the Board doesn't override this Total and Complete Moron!' Mr Trump posted. 'Maybe, just maybe, I'll have to change my mind about firing him? But regardless, his Term ends shortly!' Mr Trump lashed out after the Fed held interest rates steady for a fourth consecutive meeting on June 18, forecasting higher inflation and cooler growth as Trump's tariffs take hold. The projections were its first since Mr Trump unleashed sweeping 10 per cent tariffs on almost all trading partners in April. AFP Join ST's Telegram channel and get the latest breaking news delivered to you.
Business Times
an hour ago
- Business Times
Japan scraps US meeting after Washington demands more defence spending: report
[WASHINGTON] Japan has cancelled a regular high-level meeting with its key ally, the United States, after the Trump administration demanded it spend more on defence, the Financial Times (FT) reported on Friday (Jun 20). US Secretary of State Marco Rubio and Defence Secretary Pete Hegseth had been expected to meet their Japanese counterparts in Washington on Jul 1 for annual 2+2 security talks. But Tokyo scrapped the meeting after the US side asked Japan to boost defence spending to 3.5 per cent of GDP, higher than an earlier request of 3 per cent, the paper cited unnamed sources familiar with the matter, including two officials in Tokyo, as saying. A US official who did not want to be identified confirmed Japan had 'postponed' the talks but said the decision was made several weeks ago. The source did not cite a reason. A non-government source familiar with the issue said he had also heard Japan had pulled out of the meeting, but not the reason for it doing so. US State Department spokesperson Tammy Bruce said she had no comment on the FT report when asked about it at the regular briefing, and the Pentagon also had no immediate comment. Japan's embassy in Washington did not respond to a request for comment. BT in your inbox Start and end each day with the latest news stories and analyses delivered straight to your inbox. Sign Up Sign Up The Financial Times said the new higher spending demand was made in recent weeks by Elbridge Colby, the third-most senior Pentagon official, who has also recently upset another key US ally in the Indo-Pacific by launching a review of a project to provide Australia with nuclear-powered submarines. In March, Japanese Prime Minister Shigeru Ishiba said that other nations do not decide Japan's defence budget after Colby called in his nomination hearing to be under secretary of defence for policy, for Tokyo to spend more to counter China. Japan and other US allies have been engaged in difficult trade talks with the United States over US President Donald Trump's worldwide tariff offensive. The FT said the decision to cancel the Jul 1 meeting was also related to Japan's Jul 20 Upper House elections, at which the ruling Liberal Democratic Party is expected to suffer a loss of seats. It comes ahead of a meeting of the US-led Nato alliance in Europe next week, at which Trump is expected to press his demand that European allies boost their defence spending to 5 per cent of GDP. REUTERS
