Representations of cryptocurrency Binance are seen in front of displayed Nobitex logo and Iran flag in this illustration taken November 3, 2022.
In a major digital blow to Iran, hackers stole around $90 million from the country’s biggest crypto currency exchange, Nobitex. The high-profile cyberattack has been linked to Predatory Sparrow, a pro-Israel hacking group known for targeting Iranian infrastructure.
This hack marks a dramatic escalation in the ongoing cyber conflict between Israel and Iran. It’s not just about money — it's a digital strike with deeper geopolitical implications.
Nobitex Under Attack: Crypto Exchange Frozen
Nobitex, Iran’s leading crypto exchange, confirmed the breach on Wednesday. Operations were suspended indefinitely, and users were locked out. The platform cited a security precaution while investigating the attack.
Crypto-tracking firms Elliptic and TRM Labs validated the theft. The stolen funds were transferred to several digital wallets — but experts believe the hackers don’t even control those wallets. The intent, it seems, wasn’t to profit, but to cripple.
Some wallet addresses even carried a vulgar message targeting Iran’s Islamic Revolutionary Guard Corps (IRGC), highlighting the politically charged nature of the breach.
Who Are Predatory Sparrow?
Predatory Sparrow is not new to Iran’s cyber landscape. The group has claimed responsibility for several sophisticated hacks in recent years, including attacks on Iranian steel plants and disruptions to gas station payments.
Though they present themselves as Iranian anti-government activists, cybersecurity analysts strongly suspect ties to Israel. Their technical sophistication and choice of targets suggest state-level backing.
Their latest message on X (formerly Twitter), posted in Farsi, accused Iran of using Nobitex to dodge international sanctions. They justified their actions as a blow against Iran’s economic tools — specifically those benefiting the IRGC.
Cyber Chaos Spreads Beyond Crypto
This crypto hack was just one of several digital assaults against Iran in recent days. On Tuesday, the same hacking group reportedly destroyed sensitive data at Bank Sepah, Iran’s state-owned bank.
Iran’s semi-official Fars News Agency warned of disruptions at ATMs and gas stations. In Tehran, residents found multiple ATMs either empty or shut down entirely.
And the attacks didn’t stop there. On Wednesday, Iran’s state-run television broadcaster was also hacked. The hackers briefly aired footage calling for a mass uprising against the government. No group has yet claimed responsibility for that incident.
Iranians Caught in the Crossfire
While the hackers claim their targets are government-linked institutions like the IRGC, ordinary Iranians are bearing the brunt. With sanctions tightening and inflation rising, many have turned to cryptocurrency as a lifeline.
Cybersecurity expert Hamid Kashfi explained to CNN that this hack could harm regular users who rely on crypto for savings or business transactions. “People are banking on crypto,” he said. “Now they don’t know if their money is safe.”
The Digital Front in a Shadow War
This series of cyberattacks coincides with increasing military tensions between Israel and Iran, including missile exchanges. As the shadow war plays out online, both nations are using digital tools to sow confusion and fear.
In Israel, citizens have received fake texts claiming bomb shelters are unsafe. In Iran, the government has urged citizens to avoid WhatsApp, falsely accusing it of leaking data to Israeli intelligence. Meta, WhatsApp’s parent company, dismissed these claims and reiterated that chats are end-to-end encrypted.
Cyberwarfare Redefines Modern Conflict
The $90 million crypto hack is more than a financial hit — it’s part of a high-stakes cyber war. With each digital strike, the line between civilian and military targets blurs further.
As Israel and Iran continue their shadow conflict, cyberattacks on critical infrastructure and financial systems are becoming more destructive and visible. And in this war, it’s not just governments that lose — it’s ordinary people who pay the price.
