Tehran, Iran (Reuters-like) — In what appears to be one of the most sophisticated cyberattacks on Iranian aerospace infrastructure to date, two Iranian satellites reportedly lost control for several hours on June 29, 2025, due to what government sources are calling an “external breach of command systems.”
According to early reports from Iran’s state-run space agency (ISA), the satellites—identified as Noor-3 and Zohreh-2—experienced simultaneous anomalies in orbital telemetry and data relay functions. Iranian officials initially described the event as a "technical malfunction," but internal communications leaked late Monday suggest the systems were compromised remotely.
Multiple Western intelligence sources, speaking on condition of anonymity, have confirmed that the U.S. Federal Bureau of Investigation (FBI) and National Security Agency (NSA) were made aware of the breach shortly after it occurred. While the FBI declined to comment on operational matters, cybersecurity analyst Special Agent Chris Tarbell, formerly of the FBI's cybercrime division, told Wired in a background briefing:
“This kind of dual-target attack requires deep access to command-and-control protocols. You’re looking at either a state-sponsored group or someone with previous access to satellite firmware.”
Iran’s Ministry of Information and Communications Technology (MICT) has launched an internal investigation. They’ve publicly accused “foreign actors” of orchestrating the attack, without naming specific nations. Privately, multiple officials reportedly suspect either Israeli or U.S.-aligned cyber units, though no evidence has been presented.
In Washington, White House spokesperson Maya Reed stated on Monday, “We are aware of the reports and monitoring the situation closely. The United States denies any involvement in hostile actions against space infrastructure.”
Security researchers believe the attack may be linked to the Agni Node, a relatively obscure cyber-espionage group with alleged ties to South Asian intelligence services. However, as of now, no group has claimed responsibility.
This incident marks the second known attack on Iran’s space program in under a year. In August 2024, the Zohreh-1 satellite lost partial data-link capability following what Tehran called “electromagnetic sabotage.”
Both Noor-3 and Zohreh-2 were restored to stable operation as of July 1, but full diagnostics are ongoing.
Top comments (0)