Iran-linked hackers infiltrate Israeli firm's servers, shut down websites

Hackers linked to Iran said on Friday that they compromised the servers of Israeli web hosting company Cyberserve, shutting down a number of their client’s websites. 

The Black Shadow hacking group messaged Cyberserve on Telegram to alert them of the attack and warned that stolen data would be leaked if they didn’t contact them soon. 

They have already published what they say is client data, including names, email addresses and phone numbers, from Israeli bus line Kavim via Telegram on Saturday, reported The Jerusalem Post. 

"We have news for you," Black Shadow’s message to Cyberserve on Telegram read. 

"You probably cannot connect to many sites tonight, and that is because the Cyberserve company and its customers were targeted by us.

“And what about information? As usual, we have a lot of it. And if you do not want your information revealed, contact us soon."

Cyberserve’s customers range from public transportation companies to the Israeli Children’s Museum. It is also responsible for the development of “Atraf”, an LGBT+ dating site, leading to concerns that hackers have access to sensitive information about people’s sexual orientation. 

The New Arab was unable to access the website of the Dan bus company and the Israeli Children's Museum on Saturday. Cyberserve’s home website was also unreachable. 

Israeli media said Black Shadow is a group of Iran-linked hackers who use cyberattacks for criminal ends. 

In December 2020, the group claimed responsibility for an attack on Israeli insurance firm Shirbit, stealing massive amounts of data. 

The hackers demanded a one million dollar ransom. When this was not paid, they sold the stolen data on the dark web, resulting in the release of vehicle registration numbers and credit card details. 

Israeli officials told reporters at the time that they believed a foreign state was behind the Shirbit incident. 

Iran and Israel have been involved in a long-running shadow war with a number of cyberattacks reported on both sides in the past few years. 

Mircosoft said this month that Iran had increased its hacks on Israel by fourfold in the past year, according to The Times of Israel. 

There have also been a number of suspected cyberattacks perpetrated by Israel against Iran. 

Earlier this week Iran blamed a foreign country for a cyberattack that disrupted its petrol distribution network. 

The attack on its intranet-based system allowed motorists to buy subsidised fuel with government-issued smart cards causing long lines at petrol stations. 

Iran’s President Ebrahim Raisi said the attack was about “stoking public anger”. 

An Iranian official tweeted in Hebrew that the “enemy’s goal” of fomenting unrest through gas shortages had been thwarted.