Suspected Israeli Hackers Claim to Destroy Data at Iran’s Bank Sepah

People watch as smoke rises following an Israeli attack on the IRIB building, the country's state broadcaster, in Tehran, Iran, June 16, 2025. Majid Asgaripour/WANA (West Asia News Agency) via Reuters
People watch as smoke rises following an Israeli attack on the IRIB building, the country's state broadcaster, in Tehran, Iran, June 16, 2025. Majid Asgaripour/WANA (West Asia News Agency) via Reuters
TT
20

Suspected Israeli Hackers Claim to Destroy Data at Iran’s Bank Sepah

People watch as smoke rises following an Israeli attack on the IRIB building, the country's state broadcaster, in Tehran, Iran, June 16, 2025. Majid Asgaripour/WANA (West Asia News Agency) via Reuters
People watch as smoke rises following an Israeli attack on the IRIB building, the country's state broadcaster, in Tehran, Iran, June 16, 2025. Majid Asgaripour/WANA (West Asia News Agency) via Reuters

An anti-Iranian government hacking group with potential ties to Israel and a track record of destructive cyberattacks on Iran claimed in social media posts on Tuesday that it had destroyed data at Iran’s state-owned Bank Sepah.

The group, known as Gonjeshke Darande, or “Predatory Sparrow”, hacked the bank because they accused it of helping fund Iran's military, according to one of the messages posted online.

The hack comes amid increasing hostilities between Israel and Iran, after Israel attacked multiple military and nuclear targets in Iran last week. Both sides have launched multiple missile attacks against each other in the days since.

Reuters could not immediately verify the attack on Bank Sepah. The bank's website was offline on Tuesday and its London-based subsidiary, Bank Sepah International plc, did not immediately respond to an emailed request for comment.

Customers were having problems accessing their accounts, according to Israeli media.

Gonjeshke Darande did not respond to multiple messages sent via social media.

“Disrupting the availability of this bank’s funds, or triggering a broader collapse of trust in Iranian banks, could have major impacts there,” Rob Joyce, the former top cybersecurity official at the NSA, said in a post on X.

In 2022, Gonjeshke Darande claimed responsibility for a cyberattack against an Iranian steel production facility. The sophisticated attack caused a large fire at the facility, resulting in tangible, offline damage.

Such attacks are usually beyond the capabilities of activist hackers, security experts say, and would be more in line with the capabilities of a nation state.

The group has also been publicly linked by cybersecurity researchers to a 2021 cyberattack that caused widespread outages at gas stations across Iran.

Israel has never formally acknowledged that it is behind the group, although Israeli media has widely reported Gonjeshke Darande as “Israel-linked”.



South Korean Prosecutors Seek Drone Chief's Arrest over Operation in North

A South Korean flag covers a ceremonial guard member prior to the arrival of South Korea’s President Moon Jae-in at the White House in Washington, US, April 11, 2019. REUTERS/Carlos Barria/Files
A South Korean flag covers a ceremonial guard member prior to the arrival of South Korea’s President Moon Jae-in at the White House in Washington, US, April 11, 2019. REUTERS/Carlos Barria/Files
TT
20

South Korean Prosecutors Seek Drone Chief's Arrest over Operation in North

A South Korean flag covers a ceremonial guard member prior to the arrival of South Korea’s President Moon Jae-in at the White House in Washington, US, April 11, 2019. REUTERS/Carlos Barria/Files
A South Korean flag covers a ceremonial guard member prior to the arrival of South Korea’s President Moon Jae-in at the White House in Washington, US, April 11, 2019. REUTERS/Carlos Barria/Files

South Korean prosecutors said on Sunday they had sought court approval to detain the head of a military drone unit as part of an investigation into former President Yoon Suk Yeol and drone operations in neighboring North Korea.

Prosecutors stepped up a probe into the drone operation after indicting the jailed ex-President Yoon on Saturday on additional charges for his short-lived declaration of martial law in December.

They had summoned the unit's chief, Kim Yong-dae, on Thursday regarding accusations that Yoon ordered a covert drone operation into the North last year to inflame tension between the neighbors to justify his martial law decree, Reuters reported.

Yoon has denied the accusations.

Kim told reporters the incident was part of a "clandestine military operation" in response to trash balloons sent from the North and not intended to provoke the neighboring nation.

In October, North Korea said the South had sent drones to scatter anti-North Korea leaflets over Pyongyang, and published photos of the remains of a crashed South Korean military drone.

South Korea at the time declined to disclose whether it had sent the drones.

In a statement on Sunday, the prosecution office said it had sought an arrest warrant for Kim. Media said a court hearing is planned for Monday afternoon to review the request for a warrant.

He was arrested on Friday without a court warrant, media said. Prosecutors and police are permitted to make an "emergency arrest" if they have a strong belief someone is guilty of a serious crime and may flee or destroy evidence.