Cyberattack forces Iran steel company to halt production

Jun 26, 2022, 1:04 PM | Updated: Jun 27, 2022, 11:12 am

DUBAI, United Arab Emirates (AP) — One of Iran’s major steel companies said Monday it was forced to halt production after being hit by a cyberattack that also targeted two other plants, apparently marking one of the biggest such assaults on the country’s strategic industrial sector in recent memory.

The Iranian government did not acknowledge the disruption or blame any specific group for the assault on the state-owned Khuzestan Steel Co. and Iran’s two other major steel producers, which constitutes just the latest example of an attack crippling the country’s services in recent months amid heightened tensions in the region.

An anonymous hacking group claimed responsibility for the attack on social media, saying it targeted Iran’s three biggest steel companies in response to the “aggression of the Islamic Republic.”

The group, calling itself “Gonjeshke Darande,” shared what purported to be closed-circuit footage from the Khuzestan Steel Co. factory floor that showed a piece of heavy machinery on a steel billet production line malfunction and cause a massive fire.

“These companies are subject to international sanctions and continue their operations despite the restrictions,” the group said, citing their links to Iran’s paramilitary Revolutionary Guard.

A steel mill in the central Iranian town of Mobarakeh said that its system was struck too, while the the state-run IRAN newspaper reported that another factory in the southern Iranian port of Bandar Abbas was targeted in the cyberattack. Neither plant acknowledged any damage or work stoppage as a result.

Khuzestan Steel Co., meanwhile, said the factory had to stop work until further notice “due to technical problems” following “cyberattacks.” The company’s website was down on Monday.

However, CEO Amin Ebrahimi, claimed that Khuzestan Steel managed to thwart the cyberattack and prevent damage to production that would impact supply chains and customers. He said nothing of the explosion shown in the hacker group’s footage.

“Fortunately with time and awareness, the attack was unsuccessful,” the semiofficial Mehr news agency quoted Ebrahimi as saying, adding that he expected the company’s website to be restored and everything to return to “normal” by the end of Monday.

A local news channel, Jamaran, meanwhile reported that the attack failed because the factory happened to be non-operational at the time due to an electricity outage.

Cyberattacks have become increasingly common in Iran in recent years. The country, long sanctioned by the West, has been slow to update its networks to counter the rising use of ransomware by criminals, as well as intrusions by state actors.

In a major incident last year, a cyberattack on Iran’s fuel distribution system paralyzed gas stations across the country, leading to long lines of angry motorists. The same anonymous hacking group, Gonjeshke Darande, claimed responsibility for the attack on fuel pumps.

Train stations in Iran have been hit with fake delay messages. Surveillance cameras in the country have been hacked. State-run websites have been disrupted. Footage showing abuse in the country’s notorious Evin prison has leaked out.

Juan Andrés Guerrero-Saade, a principal threat researcher at SentinelOne, said it’s still unclear who is behind the recent cyberattacks against Iran. But he said it’s an escalation if the same groups are behind the alleged attack on the steel plants’ industrial control system.

“Something has changed in the tone of these attacks,” he said.

Lior Tabansky, a cybersecurity expert at Israel’s Tel Aviv University, said that in the murky world of cybersecurity, it’s often difficult to separate genuine claims of responsibility from false flags.

If it was indeed a cyberattack, suspicion would likely fall on Israel or the United States, he said. “However, if I were an Iranian senior official and I had problems in my ministry of steel or whatever, the best way out is to say well, the Zionists or American imperialists are cyber-attacking me.”

Iran has previously accused the United States and Israel for cyberattacks that have impaired the country’s infrastructure.

Iran disconnected much of its government infrastructure from the internet after the Stuxnet computer virus — widely believed to be a joint U.S.-Israeli creation — disrupted thousands of Iranian centrifuges in the country’s nuclear sites in the late 2000s.

Khuzestan Steel Co., based in Ahvaz in the oil-rich southwestern Khuzestan province, has a monopoly on steel production in Iran along with two other major state-owned firms.

Founded before Iran’s 1979 Islamic Revolution, the company for decades afterward had some production lines supplied by German, Italian and Japanese companies. Service has been continuous except during the catastrophic Iran-Iraq war of the 1980s, when Iraqi dictator Saddam Hussein sent his army across the border.

However, crushing sanctions on Iran over its nuclear program have forced the company to reduce its dependence on foreign parts.

The government considers steel a crucial sector. Iran is the leading producer of steel in the Middle East and among the top 10 in the world, according to the World Steel Association. Its iron ore mines provide raw materials for domestic production and are exported to dozens of countries, including Italy, China and the United Arab Emirates.

Iran’s crude steel production, however, was only 2.3 million tons last month, the WSA said. Its concurrent drop in exports has been largely attributed to sanctions-hit Russia flooding Iran’s Chinese buyers with discounted steel after losing access to Western markets amid the war on Ukraine.

___

Associated Press writers Alan Suderman in Richmond, Virginia, and Joseph Krauss in Jerusalem contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

FILE - Hiring sign is displayed outside of a retail store in Vernon Hills, Ill., Saturday, Nov. 13,...
Associated Press

Applications for jobless benefits declined last week

WASHINGTON (AP) — The number of Americans applying for unemployment benefits came back down last week, hovering near levels suggesting the U.S. labor market has been largely unaffected by the Federal Reserve’s aggressive interest rate hikes. Applications for jobless aid fell to 225,000 for the week ending Nov. 26, a decline of 16,000 from the […]
1 day ago
FILE - In this Sept. 26, 2015 file photo, Juventus President Andrea Agnelli arrives for a Serie A s...
Associated Press

Indictments requested for Agnelli and others in Juve scandal

TURIN, Italy (AP) — The Turin prosecutor’s office has requested indictments of former Juventus president Andrea Agnelli, 10 other former board members, and the club following an investigation into alleged false accounting. Former vice-president Pavel Nedved and CEO Maurizio Arrivabene — who left the club on Monday when Agnelli and the entire board of directors […]
1 day ago
Associated Press

Slovenia beekeeping tradition gets UN world heritage status

LJUBLJANA, Slovenia (AP) — Slovenia is keeping its bee buzz on a roll. After Slovenia clinched United Nations support for establishing a World Bee Day in 2008, authorities said Thursday the small European nation’s beekeeping tradition is being added to the U.N.’s list of cultural heritage that humanity should preserve. UNESCO experts gathering in Morocco […]
1 day ago
FILE - Traders work on the floor at the New York Stock Exchange as the Federal Reserve chairman Jer...
Associated Press

Fed matches year of hot inflation with feverish rate hikes

NEW YORK (AP) — Wall Street expects the impact of the Federal Reserve’s most aggressive year of interest rate hikes in at least three decades to continue to be felt through next year. The central bank’s plan to fight stubbornly high prices on everything from food to clothing has been the central focus for Wall […]
1 day ago
FILE - Jamie Lee Curtis appears at the Governors Awards in Los Angeles on Nov. 19, 2022. Curtis is ...
Associated Press

Jamie Lee Curtis to receive AARP Career Achievement Award

LOS ANGELES (AP) — “Scream Queen” Jamie Lee Curtis will be this year’s recipient of AARP The Magazine’s Movies for Grownups Awards career achievement honor. Curtis will receive the honor at the AARP’s annual Best Movies and TV for Grownups ceremony, the group announced Thursday. Alan Cumming returns to host the ceremony, which will be […]
1 day ago
FILE - In this Sept. 30, 2019, file photo, Seminole County Tax Collector Joel Greenberg talks to th...
Associated Press

Gaetz friend to be sentenced on sex crimes, other counts

ORLANDO, Fla. (AP) — A former Florida tax collector whose arrest led to a federal probe into U.S. Rep. Matt Gaetz has cooperated in investigations of two dozen people for sex trafficking and other crimes, but it may not be enough to spare him a long time in prison when he is sentenced Thursday. Joel […]
1 day ago

Sponsored Articles

Comcast Ready for Business Fund...
Ilona Lohrey | President and CEO, GSBA

GSPA is closing the disparity gap with Ready for Business Fund

GSBA, Comcast, and other partners are working to address disparities in access to financial resources with the Ready for Business fund.
SHIBA WA...

Medicare open enrollment is here and SHIBA can help!

The SHIBA program – part of the Office of the Insurance Commissioner – is ready to help with your Medicare open enrollment decisions.
Lake Washington Windows...

Choosing Best Windows for Your Home

Lake Washington Windows and Doors is a local window dealer offering the exclusive Leak Armor installation.
Anacortes Christmas Tree...

Come one, come all! Food, Drink, and Coastal Christmas – Anacortes has it all!

Come celebrate Anacortes’ 11th annual Bier on the Pier! Bier on the Pier takes place on October 7th and 8th and features local ciders, food trucks and live music - not to mention the beautiful views of the Guemes Channel and backdrop of downtown Anacortes.
Swedish Cyberknife Treatment...

The revolutionary treatment of Swedish CyberKnife provides better quality of life for majority of patients

There are a wide variety of treatments options available for men with prostate cancer. One of the most technologically advanced treatment options in the Pacific Northwest is Stereotactic Body Radiation Therapy using the CyberKnife platform at Swedish Medical Center.
Work at Zum Services...

Seattle Public Schools announces three-year contract with Zum

Seattle Public Schools just announced a three-year contract with a brand-new company to the Pacific Northwest to assist with their student transportation: Zum.
Cyberattack forces Iran steel company to halt production