The hacktivist group Lab Dookhtegan targeted over 100 oil tankers operated by Iranian government-affiliated entities, disrupting their satellite communication systems (e.g., VSAT terminals). By exploiting vulnerabilities—likely unpatched systems or default credentials—the attackers gained full control over internal and external communications, effectively isolating the vessels at sea. The breach extended beyond communications, potentially compromising IT and OT (Operational Technology) systems onboard, which could disrupt navigation, cargo operations, or safety protocols. While no immediate physical damage or data theft was confirmed, the attack crippled critical infrastructure tied to Iran’s oil transport, a vital economic sector. The incident highlights the fragility of maritime cybersecurity, where compromised satellite links can paralyze fleet operations, risking delays, financial losses, and broader supply chain disruptions. The geopolitical context amplifies the impact, as such attacks could escalate tensions or provoke retaliatory measures in an already volatile region.