Edit: Gonjeshke Darande (Predatory Sparrow)

Title / name *

Summary *

Category *

Scam type *

Severity *

Chain

Token

Amount lost (USD)

Image

Upload

Paste a link or upload a file (max 5 MB).

Details (Markdown supported)

> **On attribution:** The group self-identifies and claims its operations publicly. Media reporting suggests links to Israeli military intelligence; the Israeli government has not officially acknowledged any connection.

## Overview

Gonjeshke Darande ("Predatory Sparrow") is a pro-Israel hacktivist group that first appeared around 2021 and has conducted destructive cyberattacks against Iranian infrastructure (including reported operations against Iranian steel facilities and fuel systems). It frames its actions as targeting the Iranian regime and the IRGC. [1][2]

## June 2025 financial-sector operations

Amid the Israel–Iran conflict, the group claimed an attack on the state-owned Bank Sepah (June 17, 2025) and, the next day, the Nobitex cryptocurrency exchange — draining and "burning" more than $90 million by sending it to provably unspendable vanity addresses bearing anti-IRGC messages, and publishing Nobitex's source code. The aim was disruption and messaging rather than financial gain. [1][2]

_Bracketed numbers refer to the numbered sources listed below._

Aliases (one per line)

Wallets (chain:address per line)

Propose an edit