BitBulteni

BitBulteni

Monday 23 March 2026
Policy & Regulation | June 27, 2025 | BitBulteni

Israel may have identified spies in Iran with the Nobitex attack: critical claim from TRM Labs

Israel may have identified spies in Iran with the Nobitex attack: critical claim from TRM Labs

Pro-Israeli Hacker group Gonjeshke Darende's $ 90 million Nobitex attack, after the arrest of three people working in the name of Iran in Israel drew attention. According to TRM Labs, an intelligence connection can be established between these two events. The attack is thought to provide data to espionage operations on digital assets.

Shipping Shadow in the Crypto World: Attack or operation?

Crypto Intelligence Company TM Labs, Iran’s largest stock market Nobitex, the latest attack on the last attack, not only a financial robbery, but also a geopolitical intelligence operation, he said. According to the report, after the attack on June 18, three people in Israel were arrested on charges of öz spying on behalf of Iran ”.

📡 Are digital assets a new tool in espionage?

According to the analysis of TRM Labs, 28 -year -old Dmitri Cohen, who works on behalf of the Iranian intelligence service, turned out to pay $ 500 crypto for each task. This shows that digital assets are increasingly used in state -supported operations.

“These arrests are one of the rare examples in which crypto currencies are used as a means of payment in state -supported espionage.”

  • TRM Labs Report

🔥 Isn’t the timing coincidence?

The timeline, which draws attention in TRM Labs’s report, is as follows:

13 June: Israeli Air attacks

June 18: Nobitex Cyber ​​attack ($ 90 million lost)

June 24: 3 arrests on charges of espionage

“Although the Israeli authorities have not established an official connection between the attacks and the arrests, the timing of the events and the technical details increase the likelihood of this connection.”

  • TRM Labs

💻 Nobitex: The main vessel in Iran’s crypto network

Analysis companies such as Chainalsis said that Nobitex had previously an important crypto gate for Iran’s isolated individuals from the global financial system. It was also documented in the past, when the stock market was associated with IRGC -linked ransom software groups and sanctioned Russian crypto exchanges.

🕵️ Who is Gonjeshke Darande?

Gonjeshke Darande (Praid Sparrow), which often exposed to cyber attacks, which are often exposed to the Iranian regime, took part in the operations allegedly supported by Israel. They clearly undertook the Nobitex attack.

“Although there is no direct evidence, the tactical structure that overlaps between cyber attacks and spying operations is compatible with Israel’s cyber intelligence approach.”

  • TRM Labs
Tags: Nobitex saldırısıTRM Labs raporuİran kripto borsası hackİsrail casusluk operasyonuGonjeshke DarandePredatory Sparrowdijital casuslukkripto ödeme ile ajanChainalysis Nobitexİran-İsrail siber gerilimkripto ve jeopolitik

Related Posts