Iran says major cyberattack on infrastructure repelled
Iran said it foiled a major cyberattack targeting its infrastructure on Sunday in the midst of blazing fires following the explosion which rocked its key container port in Bandar Abbas.
Iran said it foiled a major cyberattack targeting its infrastructure on Sunday in the midst of blazing fires following the explosion which rocked its key container port in Bandar Abbas.
"One of the most widespread and complex cyber attacks against the country's infrastructure was identified and preventive measures were taken," IRGC-affiliated Tasnim News quoted Behzad Akbari, CEO of Iran’s Telecommunications Infrastructure Company and Deputy ICT Minister as saying on Monday.
Akbari did not provide further details on the origins of the hack.
Only in September, Iran's Cybersecurity Strategic Management Center announced a state of cyber-readiness, issuing a red alert for financial, monetary, and communication sectors, and an orange alert for other sectors, according to Iranian media reports.
"Organizations are advised to maintain round-the-clock availability of technical teams and rapid response units due to the potential for cyber attacks," it said.
In the past Iran has blamed Israel for cyber attacks. A cyberattack that 70% of Iran's petrol stations in December 2023 was claimed by Gonjeshk-e-Darande or Predatory Sparrow, a hacking group that Iran has previously accused of having links to Israel.
In October 2021, Iran experienced a cyberattack that disrupted its fuel distribution system, affecting approximately 4,300 gas stations. Gholamreza Jalali, head of Iran’s civil defense organization, attributed the attack to foreign actors, specifically accusing the United States and Israel.
The cyberattack came just one day after Tehran and Washington concluded a third round of nuclear talks on Saturday in Oman.
Meanwhile, emergency services were fighting the fallout of a deadly explosion in Iran’s Rajaei Port in Bandar Abbas, with authorities yet to disclose the cause.
Emergency support was sent from Tehran's allies in Moscow to fight the disaster which saw at least 40 killed and hundreds more injured, according to Iran's official figures.
However, one worker at the port contacted Iran International saying that at least 23 women were killed in their office alone.
The explosion on Saturday which has devastated Rajaei Port, the country's largest container port near Bandar Abbas, has halted 57% of the country's nominal loading and unloading capacity.
Although Iranian customs officials announced that some customs and transit activities have resumed, full port operations are still suspended pending the complete extinguishment of the fire.
Cleanup efforts are underway, with Interior Minister Eskandar Momeni saying that about 80% of firefighting operations had been completed by Sunday afternoon.
At least 28 people have been killed and more than 1,000 injured.
The Ministry of Health has declared a state of emergency in Bandar Abbas, citing serious air pollution and the risk of chemical contamination. Authorities have also shut down all schools, universities, and government offices in the city as a precaution.
Rajaei Port processes about 85% of Iran’s container cargo and 52% of its oil product trade, according to the Iranian Ports and Maritime Organization.
Over the past Iranian year (March 2024 - March 2025), the port handled over 81 million tons of goods — over half of Iran’s total maritime cargo traffic — and $29 billion of Iran’s $130 billion foreign trade.
In the container sector, Shahid Rajaee handles a dominant 77% of the country's nominal container capacity, equivalent to 6.65 million TEUs (twenty-foot equivalent units), out of 11 active container ports. The next largest, Bushehr, has a capacity of just 550,000 TEUs.
A rough estimation suggests that each day of disruption at the port potentially halts the movement of an estimated 221,000 tons of various goods, including 61,000 tons of containerized cargo and 75,000 tons of oil products.
The cause of the explosion remains under investigation. A source with ties to Iran’s Islamic Revolutionary Guard Corps told the New York Times that the blast was triggered by sodium perchlorate, a chemical used in solid rocket fuel.
Less than a month before the explosion, reports indicated the arrival of the Jairan, an Iranian cargo ship linked to the transport of missile components from China to Bandar Abbas.
The Jairan, owned by the US-sanctioned Islamic Republic of Iran Shipping Lines (IRISL), delivered a cargo of sodium perchlorate to the port in late March, following a similar delivery by the MV Golbon in February, according to The Maritime Executive.
The substance is processed in Iranian facilities such as Parchin and Khojir to produce ammonium perchlorate, which constitutes 70% of the fuel for Iran’s solid-fueled ballistic missiles, including the Kheybar-Shekan, Fattah, Fateh-110, and Zolfaghar missiles.
On Sunday, an Iranian defense ministry spokesperson said that there were no military-use shipments among the import or export cargo at the port, adding that foreign media had been spreading rumors regarding the incident.
Iran’s moderate Ham-Mihan newspaper suggested sabotage was a likely cause, noting the coincidence of the blast with the resumption of expert-level talks between Iran and the United States.
Comparisons have been drawn between the Rajaei Port explosion and the 2020 Beirut port disaster. Lebanese authorities said the explosion was triggered by a fire in a warehouse with a huge stockpile of ammonium nitrate fertiliser - commonly used for ammunition and explosives - which had been negligently stored for years.
Rajaei Port, ranked 59th among the world's major ports, is considered vital for Iran’s economy, with no immediate alternative to its vast cargo-handling capacity.
Iranian officials said a full assessment of the damage and a timeline for complete restoration would be announced after the fire is fully extinguished.