Vice President Aref of Iran has expressed deep concern regarding the escalating vulnerability of cyberattacks targeting fuel stations in the country. The recent remarks made by Aref come at a time when the new government, led by Prime Minister Masoud Pezeshkian, is contemplating a potential increase in fuel prices, adding to the existing challenges faced by the nation.
During a recent ceremony introducing Iran’s new Minister of Oil, Aref raised alarm over the recent breaches impacting the country’s oil infrastructure, specifically highlighting the network connecting fuel stations. These cyberattacks have led to widespread disruptions in the fuel supply across Iran, underscoring the urgent need for bolstered security measures in the sector.
Aref criticized the inadequate response to these incidents, noting that similar attacks have occurred within the past year without significant improvements in the cybersecurity approach. He called upon the new Minister of Oil to prioritize addressing these vulnerabilities to prevent further disruptions, as reported by the Asharq Al-Awsat newspaper.
The most recent cyber incident took place in December 2023 when Iran’s fuel station network suffered a severe breach. The data breach, impacting around 60% of the country’s 4,396 fuel stations, was initially attributed to hackers believed to have connections to Israel and the United States. The Iranian National Organization for Passive Defense disclosed that the cyberattack disabled 3,800 stations, leading to significant interruptions in fuel distribution.
A hacking group known as “Predatory Sparrow” later claimed responsibility for the cyberattack on Iran’s fuel station, allegedly linked to Israel. The group stated that the attack was a response to what they perceived as Iran’s regional “aggressions.” They ensured that the attack was carefully executed to avoid harm to emergency services while aiming to disrupt the government’s digital fuel distribution system that provides subsidized fuel to drivers through a monthly allocation card.
Although Iranian authorities declared that fuel stations were back in operation within 48 hours, media reports indicated ongoing distribution issues that affected many drivers across the nation in the following days.
This recent incident is not the first time Iran’s fuel stations have been targeted by cyberattacks. In October 2021, “Predatory Sparrow” carried out a similar attack that disabled 4,300 fuel stations and breached electronic billboards in Tehran. These billboards displayed a provocative message questioning the availability of gasoline, coinciding with the second anniversary of the November 2019 protests triggered by a sudden fuel price hike.
The recurrent cyberattacks on Iran’s fuel stations underscore a critical vulnerability that the Iranian government must address promptly. It highlights the urgent need for enhanced cybersecurity measures to protect essential infrastructure from increasingly sophisticated cyber threats.
With the new Iranian government facing the dual challenge of raising fuel prices while confronting cyber threats, there is a growing necessity for comprehensive security reforms in the oil sector. Vice President Aref’s call to action reflects a growing acknowledgment of the essential task of safeguarding Iran’s electronic fuel distribution network from potential future cyberattacks.