Iran flag

Iran curbs internet access to ward off Israel’s cyberattacks

Internet access in Iran has been severely disrupted as tensions with Israel escalate and spill into cyberspace.

Iranian government officials confirmed on Tuesday that the internet curbs were intentional and described them as a measure to "maintain network stability" amid alleged Israeli cyberattacks. Iranian government spokesperson Fatemeh Mohajerani said the restrictions were “temporary, targeted, and controlled.”

Network data from internet watchdogs NetBlocks and Cloudflare Radar confirmed a sharp drop in internet connectivity. Later on Wednesday, NetBlocks described it as a "near-total internet blackout."

The measures follow a cyberattack claimed by a pro-Israel hacking group Predatory Sparrow earlier this week that targeted an Iranian bank, reportedly causing outages in account access, withdrawals and card payments. 

On Wednesday, the group also claimed responsibility for an attack on the Iranian cryptocurrency exchange Nobitex, saying they would publish the platform’s source code and data from its internal network within 24 hours. The hackers described Nobitex as “a tool for financing terrorism and violating sanctions.”

Blockchain investigator ZachXBT said that $81.7 million worth of digital assets were stolen from Nobitex following the attack. Analysts at Chainalysis estimated the theft at more than $90 million said the funds were "permanently inaccessible" after the incident.

Researchers at blockchain analysis company TRM said the incident "highlights how cryptocurrency platforms are becoming strategic tools and targets in modern geopolitical conflicts." 

While Iran's cybersecurity authorities have not directly addressed the latest incidents, local media quoted officials as accusing Israel of launching a “massive cyber war” against the country’s digital infrastructure.

Iranian officials and their security personnel also have reportedly been barred from using internet-connected devices, potentially to prevent surveillance or hacking.

In addition to internet disruptions, landline telephone services have reportedly been restricted from making or receiving international calls. Access to foreign websites also appeared to be blocked for many users.

Citizens told The New York Times that they have struggled for days to access reliable news, online services, and even their bank accounts. Experts said that the restrictions could interfere with the public’s ability to receive emergency alerts related to the ongoing conflict. Israel bombed Iranian state television during a live broadcast.

Iranian state television has also urged residents to delete WhatsApp, alleging — without evidence — that the app was collecting user data on behalf of Israel.

WhatsApp denied the accusations in a statement to the Associated Press, saying, “We are concerned these false reports will be an excuse for our services to be blocked at a time when people need them the most.” “We do not provide bulk information to any government,” the company said.

Get more insights with the
Recorded Future
Intelligence Cloud.
Learn more.
Recorded Future
No previous article
No new articles
Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.