​​​​​​​Iran shaken by cyberattack; hackers cut off satellite connection of 60 oil tankers

International News: Tehran's maritime economy has suffered a major setback. A hacker group named Lab-Dookhtegan has launched a cyberattack on several Iranian oil tankers and cargo ships. The hacker group has claimed that it has shut down the communication systems of more than 60 Iranian oil tankers and cargo ships. This attack has completely cut off the connection between ships and ports. It is worth noting that Iran is already facing strict Western sanctions, due to which its shipping companies are not getting access to modern technology, insurance, and international ports. Now the cyberattack has made its fleet even more vulnerable.

How did the cyberattack happen?

Hackers said that they broke into the system of Iran's IT and telecom company named Fanava Group. This company runs satellite communication, data storage, and payment systems. Hackers got root-level access to the Linux operating system of the ships and shut down software called Falcon. This software controls satellite communication between the ship and the shore. As a result, the ships' AIS (i.e., Automatic Identification System) and satellite tracking completely stopped.

Which fleets are affected?

1. NITC (National Iranian Tanker Company): It is Iran's largest tanker company and carries about 11 million tonnes of crude oil annually. Its tankers often try to evade sanctions by turning off the tracking system.

2. IRISL (Islamic Republic of Iran Shipping Lines): Owning a fleet of about 115 ships, this is Iran's largest cargo operator. It has already been banned by the US, the European Union, and the United Nations for collaborating in nuclear and missile programs.

Both companies were blacklisted by the US Treasury in 2020 for directly helping the IRGC (Islamic Revolutionary Guard Corps).

Cyber ​​attacks have happened before.

This is not the first time Iranian shipping has been targeted. In March 2025, the same group disrupted the communication system of 116 ships. It was then said that this attack was coordinated with the US action against Houthi rebels in Yemen. Amidst the cyberattack, the US has recently imposed new sanctions on 13 companies and eight ships, which are being linked to Iranian oil exports and arms supply.