Iranian Petrol Stations Suffer A Massive Attack

A significant cyber attack has hit Iran’s online petrol distribution system, affecting fuel stations across the country and causing long lines of frustrated motorists.

Iranian news sources have said that a foreign country was probably behind the attack and n Iranian state television account online has shared images of long queues of cars waiting to fill up in Tehran.

The Iranian ISNA news agency, which called the incident a cyber attack, said it saw those trying to buy fuel with a government-issued card through the machines instead receive a message reading 'cyber attack 64411'. 

Most Iranians rely on those subsidies to fuel their vehicles, particularly amid the country’s economic problems.
The widespread attack came shortly before the second anniversary of the November 2019 nationwide protests against an overnight petrol price rise. At the time, petrol prices as much as tripled, sparking the protests that Amnesty International has said led to the deaths of more than 300 people.

Internet access was also shut down across the country for almost a week during the protests. Some areas where protests were still continuing experienced weeks of internet disruptions.

With the details still unclear there is speculation about whether the purported attack came from the US, Israel or from local Iranian anti-regime groups. According to reports, messages were posted in some systems that were hacked, addressing Iran’s Supreme Leader Ayatollah Ali Khamenei directly and demanding to know, “Where is the gas?” The attack comes some two years after nationwide protests over gas shortages in fall 2019... The disruption at the refueling system of gas stations... in the past few hours, was caused by a cyber attack,” the state Iranian national  broadcaster said. “Technical experts are fixing the problem and soon the refueling process... will return to normal.”

The Oil Ministry said only sales with smart cards used for cheaper, rationed gasoline were disrupted and that clients could still buy fuel at higher rates.

Possible Retaliation

Iran recently carried out a complex and coordinated strike on US forces in Syria using up to five armed drones to attack a strategic point near the Jordan-Iraq border. The attack was the latest in a series of drone strikes on US forces. In a press briefing recently, the US Envoy on Iran mentioned possible US action to deter Iranian aggression in the region. although he declined to elaborate what those actions might be.

The US is considered to be the world’s most potent cyber power but it has often been hesitant to use its offensive cyber capabilities against groups other than ISIS, for fear of cyber retaliation.

Under the Trump administration, the US did hack major Iranian intelligence maritime operations to deter Iran from attacking American allies at sea. The Biden administration is not thought to have  done so to date, although Israel has reportedly hacked Iran’s Shahid Rajaee Port on May 9, 2020, as a counter strike for an attempted Iranian cyber strike on Israel’s water supply system

Iran has also accused the Mossad, the US and European intelligence agencies of using the STUXNET virus to hack its Natanz nuclear facility in 2009-2010.

Former an Israeli Security Agency official said that there was a good chance that a nation-state actor could carry out such a broad and successful attack, however, recent events have  shown that amateur hackers can cause major disruption to the US and European powers with sophisticated ransomware and other means. 

In August, Check Point Software Technologies issued a report stating that an Iranian dissident group called Indra, not Israel, executed the large scale attack on the Islamic Republic’s train system in July. Check Point said Indra’s hack was “an example for governments around the world of how a single group can create disruption on critical infrastructure.” 

If non-state groups are traditionally thought of as lacking the capability to do more than hack websites and data, this was an example of such a non-state group causing profound real-world damage.

Indra’s tools destroyed data without direct means to recover it by using a “wiper,” or malware designed to wipe the entire data system of critical infrastructure, making the recovery process complicated, locking users out of machines, changing passwords, and replacing wallpapers to custom messages crafted by the attackers. The hack included posting of fake messages about train delays and cancellations on display boards across Iran.

JPost:     Heimdal Security:       Al Jazeera:       KashmirWalla:      Bloomberg:      Oodaloop

You Might Also Read:

Israeli Hospital Attacked With Ransomware:

 

« A Short Guide To Ransomware
Police Arrest 150 Suspects In Dark Web Operation »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Tines

Tines

The Tines security automation platform helps security teams automate manual tasks, making them more effective and efficient.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Messageware

Messageware

Messageware is the market leader in securing, enhancing, and customizing Microsoft Exchange and Outlook Web App.

Silverskin Information Security

Silverskin Information Security

Silverskin is a cyber attack company that specializes in having knowledge of the attacker's mindset to identify vulnerabilities and build effective and persistent defences.

Kuratorium Sicheres Österreich (KSO)

Kuratorium Sicheres Österreich (KSO)

KSO is an independent non-profit association that has set itself the goal of making Austria safer as a national networking and information platform for topics of internal security.

AimBrain

AimBrain

AimBrain tools detect and prevent fraud, faster and more accurately than ever before.

Red Snapper Recruitment

Red Snapper Recruitment

Red Snapper Recruitment is a market leading staffing services provider to the law enforcement, cyber security, offender supervision and regulatory services markets.

SYSGO

SYSGO

SYSGO is the leading European provider of real-time operating systems for critical embedded applications in the Internet of Things (IoT).

aDolus Technology

aDolus Technology

aDolus delivers a robust solution for safeguarding against counterfeit or malicious software and firmware in mission-critical systems.

Swisscom Blockchain

Swisscom Blockchain

Swisscom Blockchain is focused on supporting the implementation and adaption of Blockchain-based platforms in enterprises across diverse industries.

Nemko

Nemko

Nemko offers testing, inspection, and certification services worldwide, mainly concerning products and systems, but also for machinery, installations, and personnel.

Shevirah

Shevirah

Shevirah specializes in products for automated mobile and IoT device vulnerability assessment, penetration testing, and mobile security awareness training.

DAtAnchor

DAtAnchor

Anchor is simply a better way to protect and control sensitive data. Zero-trust, data-centric security. Simplified.

Cyber Bytes Foundation

Cyber Bytes Foundation

Cyber Bytes Foundation exists to establish and sustain a unique Cyber Ecosystem to accelerate the development of a strong Cyber workforce and support community outreach programs.

MDSec

MDSec

MDSec is a consultancy with a passion for information security. Our consultants specialise in application, mobile and hardware security and targeted red team attacks.

Mindsprint

Mindsprint

Mindsprint (formerly Olam Technology and Business Services - OTBS) are a leading edge technology and business services firm.

Backslash Security

Backslash Security

With Backslash, AppSec teams gain visibility into critical risks in their apps based on reachability and exploitability.

HeroDevs

HeroDevs

HeroDevs is the trusted leader in providing secure, long-term support for deprecated open-source software.