What Really Happened?

In June 2025, two shocking cyber incidents hit Iran just days apart:

1. Iran’s national TV channel was hacked during a live broadcast.

2. $90 million worth of cryptocurrency was stolen and destroyed from Iran’s top crypto exchange.

   
   

These attacks happened during rising tensions in the Middle East, especially between Iran and Israel.

 TV Broadcast Hijacked – A Wake-Up Call

During a live TV program, viewers suddenly saw a strange message appear on their screens. The message supported protests and criticized the Iranian government. Officials quickly stopped the feed, but the damage was already done.

Experts say this was a “broadcast signal hijack” — hackers took control of the signal before it reached people’s TVs.

How did this happen?

• Hackers may have accessed satellite uplinks or TV control systems.

  
  

• They replaced the real content with their own message.

• This kind of attack is rare and dangerous — it shows even national media is not fully secure.

 $90 Million Crypto Attack – More Than Just Theft

A day later, hackers attacked Nobitex, Iran’s largest crypto exchange.

Here’s what happened:

• They moved around $90 million worth of cryptocurrency from Nobitex.

• Instead of keeping it, they sent it to burn wallets — addresses that no one can access, not even the hackers.

• This means the money is permanently gone.

Why would someone destroy the money?

• Experts believe this wasn’t for profit.

• It was likely a political message — showing power, making a statement, and damaging Iran’s economy.

 Is This Cyberwar?

Some reports link the hackers to Predatory Sparrow, a group believed to be tied to Israeli intelligence.

These incidents weren’t just random — they were highly organized, well-planned, and meant to embarrass and weaken Iran during a time of conflict.

This shows how cyber attacks are now part of modern warfare.

What Can We Learn?

These incidents teach us that:

• No system is 100% secure, even national TV or financial exchanges.

• Cybersecurity must be a top priority for governments and companies.

• Crypto exchanges need to have stronger protection, like:

  • Cold wallets (offline)

  • Regular audits

  • AI-powered threat detection

Governments must also protect their media networks, using:

• Encrypted communication

• Physical access controls

• 24/7 cyber monitoring

 Conclusion

In just 48 hours, Iran saw both its TV signals hijacked and millions in crypto wiped out.

This isn’t just about Iran. It’s a reminder to every country and company:

• Cyber attacks are faster, smarter, and more dangerous than ever.

• Hackers can now destroy money, control what you see on TV, or shut down banks—all without firing a shot.

As cyber threats rise, the world must invest more in strong, smart, and simple cybersecurity solutions.

 FAQ 

What happened to Iran's state TV in June 2025?

It was hacked during a live broadcast, showing protest messages against the government.

Who is suspected of hacking Iran’s TV channel?

The group “Predatory Sparrow,” believed to have ties with Israeli intelligence.

What kind of cyberattack was it?

It was a broadcast signal hijack—where the attacker replaces the real feed with their own.

When did this cyberattack happen?

It occurred in mid-June 2025.

What happened to Nobitex exchange?

$90 million worth of cryptocurrency was stolen and sent to burn wallets.

What are burn wallets in crypto?

They are digital wallets that nobody can access—any crypto sent there is lost forever.

Why was the crypto destroyed instead of stolen?

Experts believe it was a political message, not an attempt to make money.

Is this considered a cyberwarfare incident?

Yes, it’s a clear example of modern cyberwar tactics used during geopolitical tensions.

What is Predatory Sparrow?

A hacker group known for advanced cyberattacks against Iranian targets.

Was the crypto stolen traceable?

Yes, blockchain records show the movement to non-recoverable addresses.

How can TV signals be hijacked?

By compromising satellite links, studio systems, or distribution networks.

Is it common to hijack state broadcasts?

No, it’s rare and very difficult, indicating a highly skilled attack group.

How are crypto exchanges like Nobitex targeted?

Through vulnerabilities in their servers, wallets, and internal controls.

What can crypto platforms do to stay secure?

Use cold wallets, multi-factor authentication, regular audits, and AI monitoring.

Did the hackers profit from the attack?

No, they destroyed the funds, making it a symbolic, non-financial strike.

What are the signs of a state-sponsored cyberattack?

High sophistication, political motive, and no financial gain.

Why is cybersecurity so important now?

Because cyberattacks can affect media, finance, and government stability.

Can AI be used in such attacks?

Yes, AI can automate and optimize attacks for maximum damage.

How did people react in Iran?

With confusion and concern, especially over the loss of funds and media control.

What are the geopolitical implications of these attacks?

They escalate digital tensions between Iran and its rivals, especially Israel.

How do governments fight cyberattacks?

Using national CERTs, advanced monitoring tools, partnerships, and intelligence sharing.

Are crypto users in Iran affected directly?

Yes, those with accounts on Nobitex lost funds due to the hack.

What lessons can be learned from this event?

No system is fully safe—cybersecurity must be proactive and multilayered.

How do burn wallets work?

They have no known private key, so no one can retrieve the funds.

What is cyber sabotage?

It’s a digital attack meant to cause damage, not steal data or money.

Are there legal consequences for such attacks?

Yes, but attribution is difficult, especially across borders.

Why destroy cryptocurrency instead of stealing it?

To send a message, disrupt systems, and create panic.

Is Iran planning any response?

While details are unclear, Iran has increased digital monitoring and security.

Can such attacks happen in other countries?

Yes, any country with weak infrastructure or political conflict is at risk.

What should organizations do after a cyberattack?

Investigate, improve defenses, inform users, and prevent future breaches.