Skip To Content
JEWISH. INDEPENDENT. NONPROFIT.
Breaking News

Did Israel Launch Cyberattack on Iran Nuclear Talks Hotels

Three European hotels that hosted the Iran nuclear talks reportedly were targeted by a computer virus widely believed to be used as spyware by Israel.

Each of the unnamed hotels was targeted by a version of the Duqu virus about two weeks before hosting the negotiations between Iran and world powers, The Wall Street Journal reported Wednesday, citing researchers at a leading cybersecurity firm, Kaspersky Lab ZAO, based in Moscow.

A report by Kaspersky on the virus, which has been linked to Israel, was set to be released Wednesday.

The Wall Street Journal reported in March that Israel allegedly spied on the Iran nuclear talks in 2014.

Kaspersky does not identify Israel by name as being responsible for the virus, which allows the hacker to eavesdrop on conversations and steal electronic files, and could also enable the hacker to operate two-way microphones in hotel elevators, computers and alarm systems, according to The Wall Street Journal. The company’s report is called “The Duqu Bet.” Bet could be a reference to the second letter of the Hebrew alphabet.

Three hotels in Switzerland have served as venues for the talks, as well as a hotel in Vienna, Austria, and one in Munich, Germany. Israeli officials declined to comment on the report. Israel has denied spying on its allies.

U.S. intelligence agencies view Duqu infections as Israeli spy operations, former U.S. officials said, according to the report.

The Duqu virus reportedly is related to Stuxnet, the computer worm that set back Iran’s nuclear program by several months or years by affecting some of its computer systems and centrifuges used to enrich uranium after it was released in 2010. The New York Times reported that it was a joint project of Israel and the United States.

In addition to the three hotels that were hacked, the virus was found in computers at a site used to commemorate the 70th anniversary of the liberation of the Nazi death camp at Auschwitz, which was attended by several world leaders. A former U.S. intelligence official told the Journal that it was common for Israel and other countries to target large international gatherings such as the one held in late January.

A message from our CEO & publisher Rachel Fishman Feddersen

I hope you appreciated this article. Before you move on, I wanted to ask you to support the Forward’s award-winning journalism during our High Holiday Monthly Donor Drive.

If you’ve turned to the Forward in the past 12 months to better understand the world around you, we hope you will support us with a gift now. Your support has a direct impact, giving us the resources we need to report from Israel and around the U.S., across college campuses, and wherever there is news of importance to American Jews.

Make a monthly or one-time gift and support Jewish journalism throughout 5785. The first six months of your monthly gift will be matched for twice the investment in independent Jewish journalism. 

—  Rachel Fishman Feddersen, Publisher and CEO

Join our mission to tell the Jewish story fully and fairly.

Republish This Story

Please read before republishing

We’re happy to make this story available to republish for free, unless it originated with JTA, Haaretz or another publication (as indicated on the article) and as long as you follow our guidelines. You must credit the Forward, retain our pixel and preserve our canonical link in Google search.  See our full guidelines for more information, and this guide for detail about canonical URLs.

To republish, copy the HTML by clicking on the yellow button to the right; it includes our tracking pixel, all paragraph styles and hyperlinks, the author byline and credit to the Forward. It does not include images; to avoid copyright violations, you must add them manually, following our guidelines. Please email us at [email protected], subject line “republish,” with any questions or to let us know what stories you’re picking up.

We don't support Internet Explorer

Please use Chrome, Safari, Firefox, or Edge to view this site.