DEV Community: Cybersec News

NEWS UPDATE — July 1, 2025 | 6:45 PM UTC Hacker “0-P” Claims Responsibility for Iranian Satellite Breach; FBI Launches Manhunt

Cybersec News — Wed, 02 Jul 2025 01:17:20 +0000

(Washington, D.C.) — Just two days after two Iranian satellites were knocked offline in a coordinated cyberattack, a notorious hacker known only by the alias “0-P” has claimed responsibility for the breach.

In a post uploaded to an encrypted messaging forum on the dark web late Monday night, 0-P released fragments of satellite command logs and internal Iranian server credentials, along with a short message:

“Iran is just funny to mess with, now they cant even use a orbit on me. — 0-P”

Cybersecurity experts are working to verify the authenticity of the data dump, but early analysis by researchers at MITRE Corporation suggests the access logs match the operational signature of Iran’s Zohreh-2 geostationary satellite. The leaked files include satellite telemetry paths, uplink timestamps, and encrypted ground station credentials — believed to be valid at the time of the breach.

The FBI’s Cyber Division confirmed on Tuesday afternoon that it is actively investigating the breach and seeking the individual or group behind the 0-P alias.

FBI Special Agent Elvis Chan, a senior cybercrime investigator, told reporters during a press conference:

“We take this intrusion seriously. Any unauthorized access to aerospace systems — whether U.S. or foreign — is a breach of international cybersecurity norms and presents a global security risk. The individual operating under the alias 0-P is now the subject of an international investigation.”

The agency has reportedly issued a sealed warrant and has contacted INTERPOL regarding possible cross-border leads. Meanwhile, NSA officials are also assisting in digital forensics and attribution, focusing on identifying the IP obfuscation and proxy routing used during the attack.

Who is 0-P?
Little is known about the hacker. 0-P first appeared on dark net forums in early 2023, allegedly behind a series of database leaks targeting defense contractors in Eastern Europe. Cyber intelligence firms believe 0-P may be a lone actor or part of a decentralized group.

While no direct political affiliation has been claimed, analysts note the tone of the message suggests a motivation beyond profit — potentially ideological or retaliatory.

Iran’s government, meanwhile, has escalated its rhetoric, calling the hack an “act of cyber-terrorism” and vowing to respond “through all available technological means.”

This developing story marks a sharp escalation in the militarization of cyberspace, especially as nations increasingly rely on orbital assets for surveillance, communications, and defense operations.

BREAKING NEWS — July 1, 2025 Iranian Satellites Reportedly Hacked in Sophisticated Cyberattack

Cybersec News — Tue, 01 Jul 2025 23:55:05 +0000

Tehran, Iran (Reuters-like) — In what appears to be one of the most sophisticated cyberattacks on Iranian aerospace infrastructure to date, two Iranian satellites reportedly lost control for several hours on June 29, 2025, due to what government sources are calling an “external breach of command systems.”

According to early reports from Iran’s state-run space agency (ISA), the satellites—identified as Noor-3 and Zohreh-2—experienced simultaneous anomalies in orbital telemetry and data relay functions. Iranian officials initially described the event as a "technical malfunction," but internal communications leaked late Monday suggest the systems were compromised remotely.

Multiple Western intelligence sources, speaking on condition of anonymity, have confirmed that the U.S. Federal Bureau of Investigation (FBI) and National Security Agency (NSA) were made aware of the breach shortly after it occurred. While the FBI declined to comment on operational matters, cybersecurity analyst Special Agent Chris Tarbell, formerly of the FBI's cybercrime division, told Wired in a background briefing:

“This kind of dual-target attack requires deep access to command-and-control protocols. You’re looking at either a state-sponsored group or someone with previous access to satellite firmware.”

Iran’s Ministry of Information and Communications Technology (MICT) has launched an internal investigation. They’ve publicly accused “foreign actors” of orchestrating the attack, without naming specific nations. Privately, multiple officials reportedly suspect either Israeli or U.S.-aligned cyber units, though no evidence has been presented.

In Washington, White House spokesperson Maya Reed stated on Monday, “We are aware of the reports and monitoring the situation closely. The United States denies any involvement in hostile actions against space infrastructure.”

Security researchers believe the attack may be linked to the Agni Node, a relatively obscure cyber-espionage group with alleged ties to South Asian intelligence services. However, as of now, no group has claimed responsibility.

This incident marks the second known attack on Iran’s space program in under a year. In August 2024, the Zohreh-1 satellite lost partial data-link capability following what Tehran called “electromagnetic sabotage.”

Both Noor-3 and Zohreh-2 were restored to stable operation as of July 1, but full diagnostics are ongoing.

Breaking News: Anonymous Hacker 0-P (Shiny) Breaches Government and Corporate Servers

Cybersec News — Tue, 01 Jul 2025 23:32:57 +0000

In a shocking turn of events, a hacker operating under the alias 0-P, also known as Shiny, has successfully breached some of the most secure networks in the world, including government servers, DHCP systems, and major cloud platforms. The sophisticated cyberattacks, which have rattled both government agencies and private sector organizations, are sparking urgent calls for a reevaluation of cybersecurity practices globally.

Hacker Targets Sensitive Government Servers
In what is being described as one of the most serious cybersecurity breaches in recent years, 0-P has reportedly gained access to several government servers. These servers, which contain highly classified information, were believed to be some of the most secure in the world. However, the hacker bypassed firewalls, encryption protocols, and other security measures, gaining access to confidential data from multiple federal agencies.

According to cybersecurity experts, the breach occurred using a combination of zero-day exploits, advanced persistent threats (APTs), and sophisticated social engineering tactics, allowing 0-P to infiltrate the systems undetected for an extended period of time.

While the full extent of the breach is still under investigation, early reports indicate that the hacker may have accessed sensitive national security information, military communications, and even classified intelligence files. This has raised significant concerns about the vulnerability of government infrastructure to highly skilled cybercriminals.

Compromised DHCP Servers: Network Manipulation on a Large Scale
In addition to breaching government systems, 0-P’s attacks extended to Dynamic Host Configuration Protocol (DHCP) servers, which are critical for managing network configurations. By exploiting weaknesses in DHCP server security, 0-P was able to manipulate IP address assignments and reroute network traffic, compromising entire systems.

This move allowed the hacker to redirect sensitive communications and data to external servers, bypassing traditional network defenses. The ability to manipulate DHCP servers is a highly technical skill, further confirming that 0-P is no ordinary hacker. Experts have noted that this is a textbook example of DNS spoofing and man-in-the-middle attacks, where an attacker intercepts communication between two parties without detection.

Some sources indicate that the attack may have been used to gain access to more high-value targets, potentially including private companies and financial institutions with vulnerable network configurations.

Cloud Providers Targeted: Sensitive Data Leaked
Perhaps the most alarming aspect of this cybercrime spree is 0-P’s ability to infiltrate cloud servers. The rise of cloud-based infrastructure has been seen by many as a robust solution to secure data storage, but this hack shows that even the most trusted cloud service providers are not immune to advanced threats.

While the details of the cloud breach are still being investigated, sources say that 0-P accessed a significant amount of sensitive data from both private companies and government databases. This included personal user information, internal communications, and proprietary data from tech companies, some of which has already begun to surface on dark web forums.

In a chilling development, some of the compromised files reportedly include surveillance data and internal reports from government agencies. Experts are now speculating that this could be part of a broader cyber-espionage effort, with implications for national security and diplomatic relations.

Cybersecurity Response: Industry on High Alert
In the wake of these attacks, cybersecurity experts are calling the incident a wake-up call for both governments and private companies. The breach has already led to increased scrutiny of government cybersecurity practices, as well as a push for more stringent regulations in cloud services.

Katherine Hayes, a cybersecurity analyst at the International Security Organization (ISO), told reporters: “What we’re witnessing here is not just a hack, but a clear message about the vulnerabilities that exist in both governmental and corporate networks. This breach underscores the need for more advanced threat detection systems and tighter access controls, especially in sectors involving national security.”

While governments scramble to understand the full scope of the breach, private companies are also stepping up their own cybersecurity protocols. The focus is on improving encryption methods, implementing multi-factor authentication, and conducting regular vulnerability assessments of both on-premise and cloud-based systems.

Despite these efforts, many in the cybersecurity community are questioning whether these measures are enough. Experts warn that without a significant overhaul of current security practices, the risk of similar attacks remains high.

The Identity of 0-P Remains Unknown
As of now, the true identity of 0-P remains shrouded in mystery. The hacker has taken extraordinary measures to remain anonymous, using advanced tools to mask their identity and trace their actions back to multiple locations. Some believe that 0-P could be a lone wolf hacker, while others speculate that the attacks are the work of a more organized group.

Cybersecurity professionals are also considering the possibility that 0-P may be a state-sponsored actor, given the scale and sophistication of the attacks. If this proves to be the case, it could have serious implications for international relations and cybersecurity policy.

The Road Ahead: A New Era of Cyber Threats?
The hack has raised critical questions about the future of cybersecurity in an increasingly connected world. With government agencies and corporations struggling to contain the damage, many are now calling for a unified global approach to tackle cyber threats.

Tom Nguyen, a former FBI cybersecurity officer, said in a statement: “What 0-P has done is to show us that we are living in a new age of digital warfare. We need to rethink how we approach cybersecurity and develop new frameworks for cooperation among nations to protect against these kinds of attacks.”

For now, the focus remains on understanding the full scope of the breach and mitigating any further damage. However, the legacy of this hack is likely to resonate for years to come, as governments and organizations worldwide re-evaluate how they defend against an evolving and increasingly dangerous array of cyber threats.