A group calling itself Predatory Sparrow (Gonjeshke Darande) claimed cyber attacks on three major Iranian steel companies, including Khuzestan Steel. It released video apparently showing molten metal and fire spilling across a factory floor.
What happened
- The group said the attacks were a response to what it described as aggression by the Iranian regime.
- It claimed it had taken care to avoid harm to people, warning emergency services in advance.
- Iranian state media acknowledged that some steel producers had halted production because of technical problems and cyber attacks.
- Predatory Sparrow had earlier claimed a 2021 attack on Iran’s fuel distribution system; media reports linked the group to Israel, which did not confirm involvement.
Why it mattered
It was one of the rare publicly documented cases of a cyber attack causing physical damage to industrial equipment, and it raised concerns about attacks on operational technology. It also illustrated the escalating, largely covert cyber conflict between Iran and its adversaries.
Lessons for organisations
Organisations running industrial control systems should segment operational technology from IT networks, monitor for unauthorised commands, and ensure safety systems work independently of networked controls. Manual fallback procedures and regular safety drills help limit harm if control systems misbehave.
Source: Databreachtoday
Part of our Top stories archive of headline-making events in information security, privacy, and AI. If you would like help applying the lessons to your organisation, contact us.
