2021 Iranian fuel cyberattack

The Iranian fuel 2021 cyberstrike was an attack on the Iranian fuel system, government-issued cards used for buying subsidized fuel, and digital road billboards. The attack took place on 26 October 2021. The government announced that people had to buy gas without their ration card. According to the Supreme Council of Cyberspace, the attacks were similar to the attack on the Iranian rail road transit system in July.[1][2] Iranian President Ebrahim Raisi stated, "this cyberattack is neither the first time nor will it be the last."[3]

Network infrastructure is a semi-isolated system not connected to the Internet but instead uses the National Internet (National Information Network).[4]

Gholamreza Jalali, the head of Iranian civil defense, accused the United States and Israel of being behind the attack in an interview with state TV.[5]

Scale and Details

edit

Iran's 4300 gas stations were unable to process payments.[5] Initially, the Ministry of Petroleum blamed a technical error, though it was later revealed to be a cyberattack.[6] Users trying to purchase fuel at affected gas stations received a display reading "cyberattack 64411" which is associated with a hotline to the Ayatollah's office which responds to questions about Islamic law, though a possible connection was not commented on by official Iranian agencies.[7] Cybersecurity industry firms noted the similarity to a 2020 rail attack in which a similar message was displayed, prompting speculation of a possible connection between the two attacks. The previous attack was attributed by security researchers at Check Point to the hacking group INDRA, which claims to be an anti-government partisan resistance group.[8][9]

Digital billboards in Iranian cities were seen displaying messages such as "Khameini! Where is our fuel?" as news about the attack spread.[10] A group called Predatory Sparrow claimed credit for the attack along with a previous cyberattacks against Iranian rail assets earlier in 2021, although Iranian officials simply attributed it to an unnamed state actor.[11]

See also

edit

Sources

edit
  1. ^ "A cyberattack paralyzed every gas station in Iran". NPR. Associated Press. 2021-10-27. Archived from the original on 2021-10-28. Retrieved 2021-10-28.
  2. ^ "حمله سایبری به جایگاه‌های سوخت سراسر ایران؛ پیام "خامنه‌ای بنزین ما کو؟" بر بیلبوردها". العربیه فارسی (in Persian). 2021-10-26. Archived from the original on 2021-10-26. Retrieved 2021-10-28.
  3. ^ "Iran president says cyberattack not the first, won't be last - Al-Monitor: The Pulse of the Middle East". www.al-monitor.com. Archived from the original on 2021-10-28. Retrieved 2021-10-28.
  4. ^ پور, مصطفـی معـصوم (2021-10-26). "سامانه هوشمند سوخت به اینترنت وصل نیست؛ آیا خرابکاری منشا داخلی دارد؟". گجت نیوز (in Persian). Archived from the original on 2021-10-27. Retrieved 2021-10-28.
  5. ^ a b "Iran says Israel, U.S. likely behind cyberattack on gas stations". Reuters. 2021-10-30. Archived from the original on 2022-03-14. Retrieved 2022-03-14.
  6. ^ Catalin Cimpanu (2021-10-26). "Suspected cyberattack temporarily disrupts gas stations across Iran". The Record by Recorded Future. Archived from the original on 2022-01-20. Retrieved 2022-03-12.
  7. ^ Jon Gambrell (26 October 2021). "Iran says cyberattack closes gas stations across country". Associated Press. Archived from the original on 2022-02-03. Retrieved 2022-03-14.
  8. ^ Jeff Stone (2021-10-26). "Iranian state media blames hack for apparent fuel shortage, the latest incident to draw attention". Cyberscoop. Archived from the original on 2021-10-27. Retrieved 2022-03-14.
  9. ^ Elizabeth Montalbano (2021-10-27). "Cyberattack Cripples Iranian Fuel Distribution Network". Threat Post. Archived from the original on 2022-02-14. Retrieved 2022-03-14.
  10. ^ Ionut Ilascu (2021-10-26). "Iranian gas stations out of service after distribution network hacked". Bleeping Computer. Archived from the original on 2021-11-03. Retrieved 2022-03-15.
  11. ^ "Iran blames foreign country for cyberattack on petrol stations". BBC. 2021-10-27. Archived from the original on 2021-11-03. Retrieved 2022-03-15.