Iranian maritime communications system hit by cyberattack, disrupts dozens of ships

Iran's maritime shipping industry has been hit by a cyberattack that disrupted satellite communications for dozens of oil tankers and cargo ships. The attack disrupted communications on 39 oil tankers and 25 cargo ships severing links between ships and their ports. 

The cyberattack was claimed by a hacking group calling itself "Lip-Dochtjan" or "The Sewn Lips". The primary vector for the attack was Fannava, an Iranian holding company that provides satellite communications, data storage, and payment systems to the country's maritime industry.

The hacking group said that it got access to core Linux operating systems running the ship's satellite systems, which allowed them to disable Falcon, the central programme responsible for Iran's maritime communications. 

The operational impact extends beyond simple communication disruption, as modern commercial shipping relies heavily on continuous satellite connectivity for navigation, safety protocols, cargo management, and regulatory compliance. The severing of these communication links creates potential safety hazards for vessels at sea while simultaneously disrupting the coordination necessary for efficient port operations and cargo scheduling.