Israel’s Military Pressure Joined by Cyberattack on Iranian Regime Bank

The Attack on Bank Sepah Could Deepen the Sense of Disarray Within the Revolutionary Guard’s Rank and File

A cyberattack has cut access to the main bank serving Iran's Islamic Revolutionary Guard Corps.

A cyberattack has cut access to the main bank serving Iran’s Islamic Revolutionary Guard Corps.

Shutterstock

Amid relentless Israeli strikes on Iranian military and government targets, a hacktivist group has taken down the main bank serving the Islamic Revolutionary Guard Corps, reportedly cutting off thousands of key regime operatives from access to their personal accounts.

The hacking group “Gonjeshke Darande,” or Predatory Sparrow, which has launched many previous cyberattacks, announced the operation against Bank Sepah on X, and Iranians from Tehran posted videos showing ATMs unable to serve customers.

Bank Sepah served as a financial arm for bypassing international sanctions and funding terrorism using the Iranian people’s accounts.

“We, Gonjeshke Derande, have destroyed all data belonging to Bank Sepah in a cyber operation. Bank Sepah served as a financial arm for bypassing international sanctions and funding terrorism using the Iranian people’s accounts. It financed the regime’s proxy forces, missile programs, and military nuclear projects,” the post on X said.

Some Iranians on social media reported that other banks connected with the Islamic Revolutionary Guard Corps also were targeted, but these reports have not been confirmed.

Israel’s air and sabotage campaign against the Islamic Republic is not only a military operation targeting nuclear facilities and other critical sites, but also a powerful psychological offensive that has sown confusion and uncertainty within the regime’s ranks.

In this context, the cyberattack on Bank Sepah could deepen the sense of disarray within the Revolutionary Guard’s rank and file. Many members already fear that the broader population holds them in contempt, and in the event of the regime’s collapse, they risk being cast as pariahs—if not facing retribution in some cases.

Some have been surprised that the government has not completely shut down the internet to prevent the spread of real news among the public—a tactic it used repeatedly during past protests. One possible reason is its reluctance to paralyze the banking system, which relies heavily on online infrastructure, and risk further inflaming public anger. Many Iranians already hold the regime’s anti-Western and anti-Israeli policies responsible for the current war and chaos.

The hacking group first gained prominence in 2021 with a cyberattack that crippled fuel distribution centers across Iran, timed to coincide with the second anniversary of the bloody crackdown on the November 2019 nationwide protests. In a separate incident, they also claimed responsibility for hacking Iran’s state railway system.

In 2022, the group drew further attention by breaching the computer networks of several major Iranian steel companies, later releasing videos and images to demonstrate the scope of the operation. At the time, Israeli military correspondents—who often receive background briefings from senior officials—suggested that Israel may have been involved in the hack, according to the Times of Israel.

Activists and ordinary citizens who support regime change are urging Israel to strike the regime’s centers of power more forcefully.

Amid ongoing debate among Iranians over the Israeli bombing campaign, both activists and ordinary citizens who support regime change are urging Israel to strike the regime’s centers of power more forcefully. So far, Israel has acted with precision, keeping collateral damage to a minimum. But Prime Minister Benjamin Netanyahu has threatened that the campaign is not over, and more surprises are on the way.

Hundreds of thousands of Iranians have been fleeing Tehran, seeking refuge in provincial areas with fewer strategic targets. But anxiety is setting in over the safety and the immediate future of millions still in the country, as the situation continues to deteriorate.

Many are closely watching to see whether Supreme Leader Ali Khamenei—reportedly sheltering in a bunker with his sons—will become a target. It remains unclear how much control he still exerts over the country, but the government is clearly struggling to function. Fires sparked by the bombings continue to burn for days, and the police emergency number in the capital is reportedly out of service.

While Israel maintains air dominance and operates with near-total impunity over Iranian skies, the Islamic Revolutionary Guard Corps continues to launch a shrinking number of ballistic missiles toward Israel. Despite the Iron Dome defense system, some have still managed to inflict casualties and damage.

Mardo Soghom was a journalist and editorial manager at Radio Free Europe/Radio Liberty for three decades, overseeing the Iran and Afghanistan services until 2020, and was chief editor of the Iran International English website.
See more from this Author
While Many Iranians Are Pleased to See the Regime Shaken, Most Are Watching Events Unfold from the Sidelines
Israel’s Sweeping Strike Reportedly Decapitated the Leadership of the Powerful Islamic Revolutionary Guard Corps
Urging Solidarity, Activists Hope the Truckers’ Strike Could Become a Catalyst to Threaten the Islamic Republic
See more on this Topic
Ankara’s Behavior Complicates Cooperation and Challenges the Rules-Based Order That Washington Has Long Supported
The Islamic Republic May Be Standing on Ground as Unstable as the Regimes It Once Helped to Topple
The Attack on Bank Sepah Could Deepen the Sense of Disarray Within the Revolutionary Guard’s Rank and File