A hacking group linked to Israel, calling itself Gonjeshke Darande (“Predatory Sparrow”), has claimed responsibility for a major cyberattack on Iran’s cryptocurrency exchange Nobitex. 

The group accuses Nobitex of serving as a core tool in Iran’s global terror financing network and sanctions evasion efforts, stating: “Nobitex doesn’t even pretend to abide by sanctions. 

In fact, it publicly instructs users on how to use its infrastructure to bypass sanctions.”

The hackers claim they will release the exchange’s internal documents and source code within 24 hours, warning that “any assets that remain there after that point will be at risk.” 

The cyber attack resulted in tens of millions of dollars being withdrawn from Nobitex wallets, effectively shutting down the platform, resulting in losses estimated at over $48 million, according to blockchain analyst ZachXBT.

Gonjeshke Darande previously claimed responsibility for hacks on Iran’s Bank Sepah, gas stations, and a steel factory. While Israel typically maintains ambiguity around its cyber operations, this group’s actions point to a coordinated cyber strategy against Iranian infrastructure.

In response, Iran’s ambassador to the UN issued a stark warning: “If we conclude that America is directly involved in attacks on Iran, we will begin to respond.”

PHOTO: Use according to Section 27 A