FlagThis

Hacktivists are claiming responsibility for a cyber-sabotage operation targeting 116 Iranian ships. The attack, which reportedly occurred around March 18, 2025, is said to have severely disrupted the communication networks of the vessels. The primary impact is on VSAT (Very Small Aperture Terminal) systems, which are critical for maritime operations, especially for offshore coordination.

The affected entities include the National Iranian Tanker Company (NITC) and the Islamic Republic of Iran Shipping Lines (IRISL). According to Cydome, Lab Dookhtegan claimed responsibility for the attack on their Telegram channel. The hacktivist group stated they successfully disrupted both external ship-to-shore and internal onboard communications.

Analysis suggests the attackers exploited vulnerabilities in the maritime satellite communication systems that these ships rely on. While specific malware or tools used have not been identified, Lab Dookhtegan's history indicates a high likelihood of advanced techniques being employed.


References :

• Risky Business Media: Risky Bulletin: Hacktivists claim cyber-sabotage of 116 Iranian ships
• Rescana: Cyber Attack on Iranian Shipping Lines: Impact on VSAT Systems and Maritime Operations
• Industrial Cyber: Cydome analyzes Lab Dookhtegan cyber attack on Iranian oil tankers, provides mitigation action
• DataBreaches.Net: Hacktivists claim cyber-sabotage of 116 Iranian ships
• Risky.Biz: Risky Bulletin: Hacktivists claim cyber-sabotage of 116 Iranian ships

Classification:

• HashTags: #CyberAttack #Iran #VSAT
• Company: Iran
• Target: Iranian Shipping
• Attacker: Hacktivists
• Product: Shipping Lines
• Feature: Cyber Sabotage
• Type: Hack
• Severity: Medium