
Tensions between Iran and Israel have reached a new digital battlefield. On Wednesday, hackers reportedly stole approximately $90 million from Nobitex, Iran’s leading cryptocurrency exchange. The attack has been attributed to “Predatory Sparrow,” a cyber group believed to be aligned with Israel. This cyber heist adds to a growing list of digital conflicts between the two regional rivals and reflects the increasing use of cyber operations in modern geopolitical struggles.

I. Major Crypto Breach Hits Nobitex
1. Hackers Steal Millions in Cryptocurrency
Independent cryptocurrency monitoring firms confirmed that a sophisticated cyberattack resulted in the theft of around $90 million from Nobitex. The funds were quickly moved into digital wallets, many of which appear to be inaccessible even to the attackers themselves. This unusual move has led experts to believe the attackers intentionally rendered the crypto unrecoverable — possibly as a symbolic gesture.
2. Predatory Sparrow Claims Responsibility
Predatory Sparrow, a group known for executing strategic and symbolic cyberattacks on Iranian infrastructure, claimed responsibility for the Nobitex breach. In a post written in Farsi on X (formerly Twitter), the group accused the Iranian government of using Nobitex to bypass international sanctions. The message was accompanied by evidence pointing toward their involvement and their goal to weaken Iran’s financial maneuverability.
II. Coordinated Cyber Strikes on Iranian Infrastructure
1. Data Destruction at Bank Sepah
Just a day prior to the Nobitex incident, Predatory Sparrow targeted Bank Sepah, Iran’s state-owned financial institution. The hackers claimed to have destroyed critical data associated with accounts allegedly linked to Iran’s Islamic Revolutionary Guard Corps (IRGC). In response, the Fars News Agency, which is affiliated with the Iranian government, issued warnings about potential disruptions to banking services and fuel distribution systems.
2. ATM and Bank Access Disrupted
Following the cyberattacks, reports emerged from Tehran of widespread banking issues. Local sources said they were unable to withdraw money from ATMs across the city, with many machines either empty or malfunctioning. These disruptions have fueled public anxiety as Iran continues to face both military threats and now escalating digital sabotage.
3. Iranian State TV Also Breached
In a separate but likely related cyber incident, Iran’s state-run television broadcaster was hacked. During the breach, footage calling for rebellion against the Iranian regime was broadcast. Although no group has officially claimed responsibility for this particular attack, it follows the same pattern of politically charged hacking associated with Predatory Sparrow.
III. The Rise of Predatory Sparrow
1. History of High-Profile Attacks
Over the past five years, Predatory Sparrow has emerged as a disruptive force in the Middle East’s digital conflict. The group previously sabotaged operations at Iranian steel mills and halted services at gas stations across the country. Although Predatory Sparrow presents itself as an Iranian opposition group, cybersecurity analysts widely believe it has operational links to Israeli intelligence agencies.
2. Strategic Use of Cyber Warfare
The Nobitex attack appears not only financially damaging but symbolically calculated. Multiple cyber experts noted that the stolen cryptocurrency was transferred to blockchain wallets embedded with offensive messages targeting the IRGC. This suggests the hackers were less interested in profiting and more focused on making a political statement and eroding trust in Iran’s digital infrastructure.
IV. Civilian Fallout and Psychological Warfare
1. Collateral Impact on Iranian Citizens
Despite claims that the cyberattacks are targeting government entities like the IRGC, ordinary Iranians are facing real consequences. With limited access to global financial systems, many Iranians have turned to cryptocurrency as an alternative for everyday transactions and savings. According to cybersecurity analyst Hamid Kashfi, this attack could further destabilize the financial security of civilians already burdened by international sanctions.
2. Disinformation and Fear Campaigns
Cyber warfare between Iran and Israel has also included psychological operations aimed at sowing confusion and fear. In recent days, Israeli citizens have received misleading text alerts suggesting bomb shelters are unsafe. At the same time, Iranian officials have warned the public against using WhatsApp, alleging the platform is being exploited by Israeli intelligence — a claim that Meta, WhatsApp’s parent company, has dismissed as baseless, citing its end-to-end encryption.
V. A New Phase in the Iran-Israel Cyber Conflict
1. Digital Warfare Takes Center Stage
What was once a series of covert cyber skirmishes has now evolved into high-stakes, headline-grabbing digital warfare. The scale and coordination of recent attacks reflect a deliberate strategy to erode Iran’s technological and financial resilience without traditional military confrontation.
2. Implications for the Global Crypto Industry
The breach at Nobitex also casts a spotlight on the vulnerabilities of cryptocurrency exchanges in politically volatile regions. With crypto becoming a preferred alternative for sanctioned countries, such platforms are likely to become key battlegrounds in future geopolitical conflicts.
Conclusion
The cyberattack on Nobitex represents more than just a massive digital theft—it’s a message. Predatory Sparrow’s coordinated efforts to disrupt Iran’s financial and digital ecosystem signal a deeper, ongoing cyber conflict rooted in politics, power, and influence. As cyber warfare becomes an increasingly normalized tool of statecraft, the collateral damage — both economic and psychological — continues to grow. With civilians caught in the crossfire, the global community must prepare for a future where digital battles are just as consequential as those fought on the ground.














