Military action between Israel and the US against Iran is escalating into cyberspace, marked by a surge in digital attacks from both sides. Joint US-Israel military operations are underway, with potential for prolonged engagement. Iran has launched retaliatory strikes across the Middle East, impacting American bases and airports in the UAE, Bahrain, Qatar, and Kuwait.
Iranian-linked hacking groups, including the Islamic Cyber Resistance Axis and Handla Hack, have claimed responsibility for targeting Israeli defense systems, drone services, and even popular religious apps. These groups reportedly seek to recruit cyber experts for a larger conflict against Israel and the United States. In response, the US is reportedly employing an "information warfare campaign" to disrupt Iran's military capabilities and pressure regime officials.
Iran's internet access has been significantly restricted, a move seen as a precursor to relying on cyber attacks as a primary retaliation tool, especially as conventional military options are countered. Iranian cyber actors are expected to target Israeli and American defense, government, and intelligence networks. Tactics may include deploying wiper malware to erase data, launching distributed denial-of-service (DDoS) attacks, and amplifying disinformation campaigns to shape public perception.
Israel's defense forces, notably Unit 8200, work closely with the US National Security Agency on cyber defense and have been implicated in past sophisticated attacks, such as the Stuxnet virus targeting Iran's nuclear facilities. Pro-Iranian groups have also faced cyber countermeasures, with entities like Gonjeshke Darande claiming attacks on Iranian banks and infrastructure.