2021 Iranian fuel cyberattack
| Date | 26 October 2021 |
|---|---|
| Location | Iran |
| Type | Cyberattack |
| Target | Iranian fuel distribution system |
The Iranian fuel 2021 cyberstrike was an attack on the Iranian fuel system, government-issued cards used for buying subsidized fuel, and digital road billboards. The attack took place on 26 October 2021. The government announced that people had to buy gas without their ration card. According to the Supreme Council of Cyberspace, the attacks were similar to the attack on the Iranian rail road transit system in July.[1][2] Iranian President Ebrahim Raisi stated, "this cyberattack is neither the first time nor will it be the last."[3]
Network infrastructure is a semi-isolated system not connected to the Internet but instead uses the National Internet (National Information Network).[4]
Gholamreza Jalali, the head of Iranian civil defense, accused the United States and Israel of being behind the attack in an interview with state TV.[5]
Scale and Details
Iran's 4300 gas stations were unable to process payments.[5] Initially, the Ministry of Petroleum blamed a technical error, though it was later revealed to be a cyberattack.[6] Users trying to purchase fuel at affected gas stations received a display reading "cyberattack 64411" which is associated with a hotline to the Ayatollah's office which responds to questions about Islamic law, though a possible connection was not commented on by official Iranian agencies.[7] Cybersecurity industry firms noted the similarity to a 2020 rail attack in which a similar message was displayed, prompting speculation of a possible connection between the two attacks. The previous attack was attributed by security researchers at Check Point to the hacking group INDRA, which claims to be an anti-government partisan resistance group.[8][9]
Digital billboards in Iranian cities were seen displaying messages such as "Khamenei! Where is our fuel?" as news about the attack spread.[10] A group called Predatory Sparrow claimed credit for the attack along with a previous cyberattacks against Iranian rail assets earlier in 2021, although Iranian officials simply attributed it to an unnamed state actor.[11]
Consequences
Following the November 2021 cyberattack, the refueling process at gas stations across the country faced serious disruptions, leading to long queues of vehicles waiting for fuel.[12] This event sparked speculation that a new increase in gasoline prices was being planned.[13] In response, the Minister of Interior denied any plans for price hikes in the early hours of the incident.[14] Similarly, the spokesperson for the Energy Commission of the Islamic Consultative Assembly rejected the possibility of fuel price increases and urged the public to avoid visiting gas stations unless absolutely necessary.[15] The failure of the "smart fuel card" system also disrupted the refueling process for the public transport fleet.[16]
On November 5, 2021, the Ministry of Petroleum announced that to compensate for the damages caused by the cyberattack, a compensatory quota of 10 liters for private cars and 5 liters for motorcycles would be allocated.
See also
Sources
- ^ "A cyberattack paralyzed every gas station in Iran". NPR. Associated Press. 2021-10-27. Archived from the original on 2021-10-28. Retrieved 2021-10-28.
- ^ "حمله سایبری به جایگاههای سوخت سراسر ایران؛ پیام "خامنهای بنزین ما کو؟" بر بیلبوردها". العربیه فارسی (in Persian). 2021-10-26. Archived from the original on 2021-10-26. Retrieved 2021-10-28.
- ^ "Iran president says cyberattack not the first, won't be last - Al-Monitor: The Pulse of the Middle East". www.al-monitor.com. Archived from the original on 2021-10-28. Retrieved 2021-10-28.
- ^ پور, مصطفـی معـصوم (2021-10-26). "سامانه هوشمند سوخت به اینترنت وصل نیست؛ آیا خرابکاری منشا داخلی دارد؟". گجت نیوز (in Persian). Archived from the original on 2021-10-27. Retrieved 2021-10-28.
- ^ a b "Iran says Israel, U.S. likely behind cyberattack on gas stations". Reuters. 2021-10-30. Archived from the original on 2022-03-14. Retrieved 2022-03-14.
- ^ Catalin Cimpanu (2021-10-26). "Suspected cyberattack temporarily disrupts gas stations across Iran". The Record by Recorded Future. Archived from the original on 2022-01-20. Retrieved 2022-03-12.
- ^ Jon Gambrell (26 October 2021). "Iran says cyberattack closes gas stations across country". Associated Press. Archived from the original on 2022-02-03. Retrieved 2022-03-14.
- ^ Jeff Stone (2021-10-26). "Iranian state media blames hack for apparent fuel shortage, the latest incident to draw attention". Cyberscoop. Archived from the original on 2021-10-27. Retrieved 2022-03-14.
- ^ Elizabeth Montalbano (2021-10-27). "Cyberattack Cripples Iranian Fuel Distribution Network". Threat Post. Archived from the original on 2022-02-14. Retrieved 2022-03-14.
- ^ Ionut Ilascu (2021-10-26). "Iranian gas stations out of service after distribution network hacked". Bleeping Computer. Archived from the original on 2021-11-03. Retrieved 2022-03-15.
- ^ "Iran blames foreign country for cyberattack on petrol stations". BBC. 2021-10-27. Archived from the original on 2021-11-03. Retrieved 2022-03-15.
- ^ Cite error: The named reference
:1was invoked but never defined (see the help page). - ^ Cite error: The named reference
:4was invoked but never defined (see the help page). - ^ "وزیر کشور: اختلال در ارائه خدمات پمپ بنزینها به زودی رفع میشود". ISNA (in Persian). 2021-10-26. Retrieved 2021-10-26.
- ^ "واکنش نمایندگان مجلس به اختلال در پمپ بنزینها: مردم فعلاً به جایگاهها نروند". Aftab News (in Persian). 2021-10-26. Retrieved 2021-10-26.
- ^ "سازمان مدیریت بحران: جلسه ویژهای برای تأمین سوخت ناوگان حمل و نقل عمومی تهران برگزار شد". Iran International (in Persian). Retrieved 2021-10-26.