A cyberattack forces gas stations across Iran to close, authorities say

A cyberattack crippled gas stations across Iran on Tuesday, leaving angry motorists stranded in long lines.

No group immediately claimed responsibility for the attack, which rendered useless the government-issued electronic cards that many Iranians use to buy subsidized fuel at the pump.

No group immediately claimed responsibility for the attack, though it bore similarities to another months earlier that seemed to directly challenge Supreme Leader Ayatollah Ali Khamenei as Iran’s economy buckles under U.S. sanctions. Those economic problems have worsened as the U.S. and Iran have yet to jointly reenter Tehran’s tattered nuclear deal with world powers.

State television quoted an unnamed official in the country’s National Security Council acknowledging the cyberattack, hours after it aired images of long lines of cars waiting to fill up in Tehran. An Associated Press journalist also saw lines of cars at a Tehran gas station, with the pumps off and the station closed.

“I have been waiting a couple of hours for the gas stations to reopen so that I can fill up,” said a motorcyclist who gave his name only as Farzin. “There is no fuel wherever I go.”

The semi-official ISNA news agency, which first called the incident a cyberattack, said it saw those trying to buy fuel with a government-issued card instead receive a message reading “cyberattack 64411.” Most Iranians rely on those subsidies to fuel their vehicles, particularly amid the country’s economic problems.

World & Nation

‘The American Lafayette of Iran’: How a young Nebraskan became an Iranian hero

For all the current hostility between Washington and Tehran, an American who journeyed to Iran more than a century ago remains an unlikely icon there.

July 5, 2021

While ISNA didn’t acknowledge the number’s significance, that number is associated with a hotline run through Khamenei’s office that handles questions about Islamic law. ISNA later removed its reports, claiming that it, too, had been hacked. Such claims of hacking can come quickly when Iranian outlets publish news that angers Iran’s theocratic rulers.

Farsi-language satellite channels abroad published videos apparently shot by drivers in Isfahan, a major Iranian city, showing electronic billboards there reading: “Khamenei! Where is our gas?” Another said: “Free gas in Jamaran gas station,” a reference to the home of the late Supreme Leader Ayatollah Ruhollah Khomeini.

State TV said Oil Ministry officials were holding an “emergency meeting” to solve the problem. Some gas stations that accept only cash and are not in the subsidy card network continued pumping fuel.

The use of the number “64411” mirrored an attack in July targeting Iran’s railroad system that also saw the number displayed. Israeli cybersecurity firm Check Point later attributed the train attack to a group of hackers who called themselves Indra, after the Hindu god of war.

Opinion

Op-Ed: Bombs are no longer falling, but brace yourself for Iranian cyberattacks

Iran has not lost its appetite for asymmetric cyber conflict as a means of confronting the United States.

Jan. 9, 2020

Indra previously targeted firms in Syria, where President Bashar Assad has held onto power through Iran’s intervention in his country’s grinding war.

Cheap gasoline is practically considered a birthright in Iran, home to the world’s fourth-largest crude oil reserves despite decades of economic woes.

Subsidies allow Iranian motorists to buy regular gasoline at 15,000 rials per liter, which is equivalent to 20 cents a gallon. Anything in excess of the monthly quota of about 16 gallons costs double, or 41 cents a gallon. By comparison, regular gasoline costs $3.38 a gallon on average in the U.S., according to AAA.

In 2019, Iran faced days of mass protests across some 100 cities and towns over rising gasoline prices. Security forces arrested thousands, and Amnesty International said it believed 304 people were killed in a government crackdown. Tuesday’s cyberattack came in the same month in the Persian calendar as the gasoline protests in 2019.

The attack also came on the birthday of the late Shah Mohammad Reza Pahlavi, who, stricken with cancer, fled the country in 1979 just before the Islamic Revolution.

Iran has faced a series of cyberattacks, including one that leaked video of abuses at its notorious Evin prison in August.

The country disconnected much of its government infrastructure from the internet after the Stuxnet computer virus — widely believed to be a joint U.S.-Israeli creation — disrupted thousands of Iranian centrifuges in the country’s nuclear sites in the late 2000s.