Hackers Lay in Wait, Then Knocked Out Iran Ship Comms

Lab-Dookhtegan claims to have compromised Fanava Group and gained root access to satellite communications on Iranian vessels, disabling iDirect/Falcon, bricking automatic identification system (AIS) and voice links, and overwriting multiple storage partitions on dozens of cargo ships and tankers — causing weeks-to-months of downtime per vessel. The attackers had persistent access since May, could have eavesdropped on calls, and previously leaked materials tied to APT34; the incident underscores supply-chain risk to maritime critical infrastructure.