Gas Stations from the National Iranian Oil Products Distributions Company (NIOPDC) have stopped working today due to a Cyberattack that harms the entire distribution network. The incident has generated a string of hacks on electronic road billboards to show the messages demanding an explanation or asking for the fuel.
The NIOPDC network has more than 3,500 stations across the country and has been providing the oil essentials for more than 80 years.
What are the Attackers who echo Older Attacks?
Research is looking into the cause of the disruption and there is no public information about who did it at this moment but Iran is blaming a hostile country. A clue, which could also be a false lead is a message displayed on the machines reading “Cyberattack 64411.”
The note is a reference to a cyberattack in July that disrupted Iran’s train service. The attackers also modified the railway message boards to say that hackers caused the trains to be delayed or canceled and displayed the phone number for the office of Supreme Leader Ali Khamenei.
Our Security investigators revealed that Iran’s train station system was targeted with malware specifically built to delete data (file wiper) called Meteor that had not been seen before.
Today’s attacks left some Iranians waiting for hours for the gas stations to open and were left without fuel. According to media reports, the “cyberattack 64411” message appeared to customers that tried to get subsidized fuel at 5 cents a liter or 20 cents a gallon using government-issued cards.
What is the News Spread about NIOPDC?
As news spread about the NIOPDC distribution network is under attack, digital billboards in multiple cities in Iran started to show messages reading “Khamenei! Where’s our fuel?” and “Free fuel in Jamaran station.”
Some local media reports initially said that the gas station disruption was caused by a technical malfunction and later noted that the issue was due to a cyberattack.
According to BBC journalists Shayan Sardarizadeh and Kian Sharifi, the Iranian state television confirmed the reports of a cyberattack hitting gas stations, and Iran’s Supreme Council of Cyberspace believes the incident is state-sponsored, although it is early to say which country is behind it.
