Cyberwarfare and Iran

Cyberwarfare is a part of the Iranian government's "soft war" military strategy. Being both a victim and wager of cyberwarfare,[1] Iran is considered an emerging military power in the field.[2] Since November 2010, an organization called "The Cyber Defense Command" (Persian: قرارگاه دفاع سایبری; Gharargah-e Defa-e Saiberi) has been operating in Iran under the supervision of the country's "Passive Civil Defense Organization" (Persian: سازمان پدافند غیرعامل; Sazeman-e Padafand-e Gheyr-e Amel) which is itself a subdivision of the Joint Staff of Iranian Armed Forces.[3]

Iran has been the target of cyberattacks, including the Operation Olympic Games (Stuxnet) attack by the United States and Israel on its nuclear facilities.

According to a 2014 report by Institute for National Security Studies, Iran is "one of the most active players in the international cyber arena".[4] In 2013, a Revolutionary Guards general stated that Iran has "the 4th biggest cyber power among the world's cyber armies."[5][6] According to a 2021 report by a cyber-security company, "Iran is running two surveillance operations in cyber-space, targeting more than 1,000 dissidents".[7] As of 2024, Iran's cyber activities have advanced, particularly in their precision and intelligence-gathering capabilities, allowing for more accurate and targeted attacks against Israel. Following directives from Iran's supreme leader Ali Khamenei after the 7 October attacks, cyber operations expanded, including joint efforts with Hezbollah. Despite these advances, Iran's cyber capabilities still fall short of Israel's, with Iranian hackers' skills being likened to those of mid-level organized crime gangs. However, Israeli officials remain concerned that Iran could rapidly enhance its capabilities, particularly through potential cooperation with Russia.[8] Iranian cyberwarfare targeted the US during the 2026 Iran war, with researchers noting that Iran's capabilities were more advanced and aggressive during this period.[9]

Background

This section is an excerpt from Cyberwarfare.[edit]
Cyberwarfare specialists of the United States Army's 782nd Military Intelligence Battalion (Cyber) supporting the 3rd Brigade Combat Team, 1st Cavalry Division during a training exercise in 2019

Cyberwarfare is the use of cyberattacks against an enemy state, causing comparable harm to traditional warfare.[10] Some intended outcomes could be espionage, sabotage, propaganda, manipulation, or economic warfare.

Many countries, including the United States, United Kingdom, Russia, China, Israel, Iran, India, and North Korea, have active cyber capabilities for offensive and defensive operations. As states explore the use of cyber operations and combine capabilities, the likelihood of physical confrontation and violence playing out as a result of, or part of, a cyber operation is increased. However, meeting the scale and protracted nature of war is unlikely, thus ambiguity remains.[11]

There has been significant debate among experts regarding the definition of cyberwarfare, and even if such a thing exists.[12] One view is that the term is a misnomer, since no cyberattack to date could be described as a war.[13] An alternative view is that it is a suitable label for cyberattacks that cause physical damage to people and objects in the real world.[14]

The first instance of kinetic military action used in response to a cyberattack resulting in the loss of human life was observed on 5 May 2019, when the Israel Defense Forces targeted and destroyed a building associated with an ongoing cyberattack.[15][16]

Attacks against Iran

In June 2010, Iran was the victim of a cyber-attack when its nuclear facility in Natanz was infiltrated by the cyber-worm 'Stuxnet'.[17] A combined effort by the United States and Israel,[18]: 211  Stuxnet destroyed perhaps over 1,000 nuclear centrifuges and, according to a Business Insider article, "[set] Tehran's atomic programme back by at least two years."[19] The worm spread beyond the plant to allegedly infect over 60,000 computers, but the government of Iran indicates it caused no significant damage. Iran crowdsourced solutions to the worm and is purportedly now better positioned in terms of cyber warfare technology.[17] No government claimed responsibility for the worm.[19] The cyber-worm was also used against North Korea.

NIN

Iranian cyber defense system – digital fortress part of national information network (national internet) – is developed for thwarting attacks and engaging attackers.[20] In November 2022, the Iranian Majlis Islamic Consultative Assembly recommended a Passive Defence Incorporation.[21]

Events

  • In October 2013, media reported Mojtaba Ahmadi, who served as commander of the "Cyber War Headquarters" was found dead wounded by bullets in Karaj.[22]
  • Israel November 2018: The Iranian telecommunication minister Mohammad-Javad Azari Jahromi accuses Israel of a failed cyberattack on its telecommunications infrastructure, and vows to respond with legal action.[23][24]
  • October 2021: An attack paralyzed gas stations across the country, preventing users from purchasing fuel using state-issued cards and digital billboards displaying anti-government messages
  • In September, October and November 2022, Iranian state networks and emails came under attack by Anonymous and other hacking groups acting in solidarity with Iranian protestors.[25]
  • In the year 2023 several government ministries were fully hacked by multiple people including Ministry of Science research and technology on 23 September.[26][27][28] Veterans affairs[29] Ministry of foreign affairs(50TB)[30] Central Insurance and 19 subsidiary corporations(119 million lines records)[31][32][33] City of Tehran municipality, State news bulletin[34] National Civil Registration vital records organization database(20TB)[35] Atomic Energy Organization[36] Presidency[37] Ridesharing company Tapsi was hacked as well.
  • December 2023 seventy percent of entire national Iranian fuel pumps taken out, Predators Sparrow took responsibility[38]
  • January 2024 Snapp was hacked with records of 80 million Iranians along with payment info sold.[39]
  • In 2024 February
    • Islamic Consultative Assembly was hacked revealing massive payment to members.[40][41]
    • Russian hackers attacked Iranian embassy.[42]
    • 3000000 court penal cases of Iranian Judicial system hacked and put online.[43]
    • Anonymous reportedly extracted 14 GB of data out of a Malek-Ashtar University of Technology server belonging to Ministry of Defense.[44]
    • US military attacked two Iranian intelligence vessels at Red Sea.[45]
  • In May 2024
    • Iran was targeted with huge scale cyberattacks causing internet issues [46]
  • In June 2024
    • Islamic culture and guidance's ministry Haj.ir taken out, source code and database hacked by IRleaks team, it included pilgrim and civil travel records since 1980s[47]
    • Ministry of Science hacked.[48]
  • IRLeaks attack on Iranian banks
  • October Israeli cyberattacks on nuclear facilities[49]
  • 10000 documents and emails related to oil smuggling and regime corruption leaked by Anonymous.[50][51]
  • In April 2025 Iranian hackers used MURKYTOUR malware in social engineering attack campaign in Israel.[52]

June 2025 – Post-war

During the Twelve-Day War, phones belonging to drivers and bodyguards of IRGC commanders were hacked by Israel.[53] Iran disabled GPS signal access by jamming it from the 12 June.[54]

Since June 2025, cloudflare radar recorded that Iran ordered at least 8 separate internet blackouts nationwide in Iran throughout 2025.[55][56]

Iran also set up a law to enforce the capital death penalty punishment for connecting to and using the internet via SpaceX Starlink satellite broadband technology.[57][58][59]

In September, Iran executed Iranian database expert for reason of espionage on behalf of Israel.[60][61]

In December a hacker sold leaked data belonging to more than 69 million Iranian citizens including full names, birthday, national id, postal code & address, and phone number.[62]

2026 Iran war

During the 2026 Iran War, the service of two Iranian banks, Bank Sepah and Melli Bank, both with ties to the Iranian Government and the IRGC, were reportedly disrupted.[63][64]

Iranian cyberwarfare directly targeted the US during the war, with researchers stating that Iran's cyberwarfare capabilities were more advanced and aggressive during the conflict.[9]

June 2026 Iranian banks hack

Since 13 June 2026, four largest Iranian banks that were being serviced by National Informatics Corporation were taken out and gone for weeks. Banks Melli , Saderat, Tejarat, Tose Saderat for over nine days.[65] On 2 June, National security commissioner called for restoring cyber security to the country.[66][67] Iranian Central Bank denied they were deliberately sabotaging their own government banks with disruption.[68] Banks offered little response to public.[69] Central bank also failed to conduct global subsidiy payment to public.[70]

Attacks against US

Several media outlets and ex NSA chief accused the Iranian regime of conducting cyber sabotage/espionage attacks on water plants in United States including in New Jersey.[71][72][73]

Attacks by Iran

The Iranian government has been accused by Western analysts of its own cyber-attacks against the United States, Israel and Persian Gulf Arab countries, but denied this, including specific allegations of 2012 involvement in hacking into American banks.[19] The conflict between Iran and the United States has been called "history's first known cyber-war" by Michael Joseph Gross in mid-2013.[74]

2010–2020

  • Israel August 2014: An IDF official told the press that Iran has launched numerous significant attacks against Israel's Internet infrastructure.[75]
  • Turkey 31 March 2015: There was a massive power outage for 12 hours in 44 of 81 provinces of Turkey, holding 40 million people. Istanbul and Ankara were among the places suffering blackouts. According to Observer.com, Iranian hackers, possibly the Iranian Cyber Army, were behind the power outage.[76]
  • United Kingdom June 2017: The Daily Telegraph reported that intelligence officials concluded that Iran was responsible for a cyberattack on the British Parliament lasting 12 hours that compromised around 90 email accounts of MPs. The motive for the attack is unknown but experts suggested that the Islamic Revolutionary Guard Corps could be using cyberwarfare to undermine the Iran nuclear deal.[77]
  • United States November 2020: CISA reported an Iranian group obtained private voter registration data, for the purposes of voter intimidation.[78]

2022

  • Israel January 2022: The website of Israel's Jerusalem Post newspaper and the Twitter account of Maariv newspaper are hacked by suspected Iranian hackers. The website's content was replaced with a threat to target the Shimon Peres Negev Nuclear Research Center, and an apparent reference to Qasem Soleimani who was assassinated exactly two years earlier in Baghdad, Iraq.[79][80]
  • Israel March 2022: Large-scale cyberattacks were launched against multiple Israeli government websites, allegedly by Iran as retaliation for failed Mossad operations, though neither the attack attribution nor the purported Mossad operations could be confirmed as of March 2022. The National Cyber Directorate declared a state of emergency as a result of the attacks and unnamed defense sources told media outlets it was possibly the largest-ever cyberattack against Israel.[81][82]
  • Albania November 2022: Iranian hackers attacked Albanian networks.[83][84]
  • United States November: seventeen American networks system were turned into mining crypto because of existing undefended vulnerability.[85]

2023

  • Moneybird ransomware was used by Agrius against Israeli people.[86] Cyberattack on Israeli university was blamed on Iranian ministry of intelligence.[87] Attacks attributed to Iranians targeted Israeli ports and Haifa harbors.[88]
  • Disinformation en masse sponsored by state targeted Iranians in 2023.[89]
  • In August 2023, Germany's Federal Office for the Protection of the Constitution reported that hackers linked to Iran's Islamic Revolutionary Guard Corps targeted Iranian regime opponents in Germany, using fake identities to conduct cyber espionage.[90]
  • Sophos and Zimperium report Iranian citizens credentials hacked by Iranian hackers, with Firebase, C2 (C&C) iOS, Android malware apps called Bank Saderat, Central Bank and Bank Mellat.[91]
  • In November 2023, Ziv Hospital in Safed, Israel, reported a cyber breach of its computer systems. An Iranian-linked hacking group subsequently claimed to have obtained 500 gigabytes of patient information.[8]
  • In late November 2023, the Municipal Water Authority of Aliquippa, Pennsylvania experienced a cyberattack by pro-Iran hackers who breached its industrial equipment, including a system managing water pressure.[92]
  • In December 2023, a cyberattack by hackers linked to Iran disrupted the water supply in a rural area of County Mayo, Ireland, leaving about 160 households without water for two days.[93]
  • 14 December 2023 ESET documented OilRig group which is state sponsored use C&C attacks.[94]

2024

  • In February 2024, OpenAI announced that it had shut down accounts used by the Crimson Sandstorm hacking group. The group had been using OpenAI services to research evasion techniques, write and refactor code, and create phishing campaign content.[95][96]
  • April 2024 Israel secrets published by Iranian website,[97]
  • In June 2024, Iranian-backed hackers, identified as Mint Sandstorm (also known as Charming Kitten or APT35), targeted a high-ranking official from a U.S. presidential campaign with a spear-phishing attack. The hackers used a compromised email account to send a malicious link.[98]
  • In July 2024, MuddyWater, an advanced persistent threat group, increased cyber attacks in the Middle East.[99]
  • On 9 August 2024, Microsoft reported that Iran has intensified its interference in the US elections by launching fake news sites and conducting hacking attempts. According to a Washington Post report, Iranian-operated news networks, such as Nio Thinker and Savannah Time, aim to polarize American voters by promoting extreme viewpoints. Microsoft also detailed a spear-phishing attack conducted by Iranian hackers targeting a US presidential campaign. This group used a compromised email account to attempt unauthorized access to sensitive information. Another Iranian group also managed to breach an account belonging to a county government employee in a swing state.[100]
  • In September 2024, U.S. authorities revealed that Iranian hackers had accessed and distributed stolen information from Trump's campaign to individuals linked to Biden's re-election effort, aiming to disrupt the election. Despite Iran's denial of involvement, officials suggested the intent was to erode public confidence in the electoral process.[101]
  • Also in September 2024, Swedish authorities revealed that a cyber group called Anzu, operating under Iran's Islamic Revolutionary Guard Corps (IRGC), were responsible for hacking into a Swedish text messaging service in July 2023, taking over passwords, usernames and other tools, and sending thousands of messages calling Swedes "demons" and bearing instructions to exact vengeance upon Koran burners. Iran denied the accusation, though the investigation by the Swedish Prosecution Authority managed to identify the individual hackers responsible for the data breach. In a statement by Justice Minister Gunnar Stromme it was said that the goal was to destabilise Sweden or increase polarisation, and the security service warned that Iran is among those seeking to create division and bolster their own regimes.[102][103]

On 30 October FBI and Treasury released a cybsecurity threat advisory related in relation to Emennet Passargad.[104][105]

In November 2024 ClearSky revealed an Iranian "dream job malware" APT TA455 doing an op using North Korean shared methods targeting US defence sector.[106]

Iranian state-sponsored hackers, identified as TA455 (also known as APT35 and Charming Kitten), have been conducting a cyber espionage campaign targeting the aerospace industry since September 2023, using tactics similar to those of North Korean threat actors. The campaign involves creating fake recruiter profiles on LinkedIn and using malicious domains to lure victims into downloading malware known as SnailResin. Victims are enticed to open ZIP files disguised as job-related documents, which have a low antivirus detection rate. The malware is deployed through DLL side-loading attacks, closely mirroring techniques used by North Korean hackers. Researchers suggest that the Iranian hackers may have adopted these methods from North Korea, particularly given the malware's initial association with North Korean groups like Kimsuky and Lazarus. TA455 employs Cloudflare to obscure its command-and-control domains and encodes command and control data on GitHub to blend in with legitimate web traffic, making tracking their infrastructure difficult. The primary targets of this campaign are aerospace professionals, with the goal of infiltrating networks within the aerospace, aviation, and defense sectors, particularly in the Middle East, including Israel, the UAE, and potentially Turkey, India, and Albania. The goal appears to be espionage and data exfiltration from these high-value targets in the aerospace sector.[107]

The UK and US have jointly issued a warning about ongoing spear-phishing attacks conducted by cyber actors affiliated with Iran's Islamic Revolutionary Guard Corps (IRGC). These sophisticated attacks target individuals connected to Iranian and Middle Eastern affairs, including government officials, think tank personnel, journalists, activists, and those involved in US political campaigns. The attackers use social engineering techniques to impersonate trusted contacts, aiming to gain access to victims' personal and business accounts. They often use fraudulent login pages to obtain credentials, allowing them to access sensitive information and manipulate email accounts. The National Cyber Security Centre (NCSC) and its US counterparts are urging at-risk individuals to follow mitigation steps and utilize free cyber defence services to protect themselves. Paul Chichester, NCSC Director of Operations, emphasized the persistent nature of this threat and the importance of remaining vigilant, particularly for those in sensitive sectors.[108]

December

  • FBI's Donald Trump appointment director Kash Patel successfully hacked.[109]
  • Cotton Sandstorm : Meta reported that they had successfully detected and taken down 48 accounts belonging to IRGC posing as anti west activists part of an influence op[110][111]

March 2025

LabDookhtegan launched a cyberattack against Iranian oil rigs, jamming their communications and electronic guidance systems, while disrupting the satellite network connectivity of 116 ships.[112]

Codebreakers hackers released entire database records of bank Sepah from up to 1925.[113]

Iranians hacked public announcement speakers from an Israeli kindergarten.[114] In the 30 January Iranians failed to hack Gemini accounts product of Google.[115]

In February Minister of intelligence hacked 2 terabytes of data from Israeli police.[116]

In March, a 30,000-node DDoS botnet originating in Iran was discovered.[117]

  • Thirty million users of Mobile Communications of Iran were hacked.[118]

April 2025

In April Iranian regime reported a cyber attack on regime infrastructure.[119]

May 2025

Unit 42 discovered an Iranian APT35 sponsored fake german Mega Model agency fashion Modeling website collecting user data on behalf of fake AI generated identity Shir Benzion.[120]

In 14 May Prana group hack revealed masked identity of Majiz Azami, owner of Sepeher Energy Jahan and its subsidiary Energy Hamta Pars, a front company for Iranian Armed Forces Staff to be using Qatari's help to smuggle 65 million barrels of oil worth $4.2bn. The company was incorporated in Tehran in November 2022.[121]

In 30 May Meta reported Iranian regime influence operation network taken out.[122]

Iranian man Sina Qolinejas pleaded guilty to helping ransomware attack on City of Baltimore.[123]

June 2025

ESET reported they have had tracked a malware attack against Iraqi and Iraqi Kurdistan government targets attributed to oilrig subcluster.[124]

March 2026

In March 2026, an Iran-linked hacking group known as Handala claimed responsibility for breaching the personal email account of FBI Director Kash Patel and publishing the emails and personal data online.[125][126]

June 2026

Since 13 June four 4 Iranian govt major banks Tejarat, Saderat, Tosee Saderat, Meli were hacked and locked.[127]

Handala affiliates attacked Bakersfield, California water system.[128]

Albanian Prime Minister reported several cyberattacks against coastal development backed by Kushner.[129]

Blackshadow targeted middle east infrastructure with cyber sabotage.[130]

Iranian regime attempted to job recruit for espionage from oil companies and aviation companies.[131]

July 2026

A preliminary report recorded the potential responsibility of Iranian hackers for a cyberattack on many municipal water systems in Minnesota in July 2026.[132]

August 2026

In August 2026, the U.S. Department of Justice announced new and updated charges against 17 individuals for conducting hacks and data theft ‌for the Islamic Revolutionary Guard Corps and other Iranian government and academic clients against U.S. universities, companies, and government agencies. The DOJ alleged that the individuals worked with the Mabna Institute during hacking campaigns.[133]

A small British power plant was shut down by Iranian hackers for days.[134]

Command and control

Iranian armed forces install malware apps for espionage on Android phones.[135] According to Microsoft, they could steal victims identity.[136]

AI Identity theft

On 28th August 2026 Axios reported Iranian regime psyops affiliated hackers used AI to impersonate Americans on Meta disinformation campaign.[137] Dept of State offered 10$ million bounty for information leading to indictment of hackers Fateme Sadiqi and Mohamed Shirinkar.[138][139]

Arrests

On 1 August 2026, the FBI arrested Amir "Kinglet" Barati, an Iranian-Turkish black hat hacker allegedly affiliated with the Iranian government, in Montenegro during his vacation there.[140]

Suspended Iranian accounts

On 5 May 2020, Reuters reported, quoting a monthly Facebook report, that Iranian state-run media had targeted hundreds of fake social media accounts to covertly spread pro-Iranian messaging, online since at least 2011, for secretly broadcasting online promotional messages in favor of Iran in order targeting voters in countries including Britain and the United States.[141] Accounts were suspended for coordinated inauthentic behavior, which removed eight networks in recent weeks, including one with links to the Islamic Republic of Iran Broadcasting.[141]

See also

Alleged operations and malware against Iran
Alleged operations and malware by Iran

References

  1. ↑ Joshi, Shashank. "Iran, the Mossad and the power of cyber-warfare". Archived from the original on 3 October 2013. Retrieved 18 March 2015.
  2. ↑ "Iran's military is preparing for cyber warfare". The Telegraph. 3 October 2013. Archived from the original on 10 August 2018. Retrieved 18 March 2015.
  3. ↑ Bastani, Hossein (13 December 2012). "Structure of Iran's Cyber Warfare". Institut Français d'Analyse Stratégique. Archived from the original on 23 May 2019. Retrieved 18 March 2015.
  4. ↑ Siboni, Gabi; Kronenfeld, Sami (3 April 2014). "Developments in Iranian Cyber Warfare, 2013–2014". INSS Insight. Institute for National Security Studies. Archived from the original on 5 January 2020. Retrieved 18 March 2015.
  5. ↑ "Israeli Think Tank Acknowledges Iran as Major Cyber Power, Iran Claims its 4th Biggest Cyber Army in World". Hack Read. 18 October 2013. Archived from the original on 30 May 2019. Retrieved 18 March 2015.
  6. ↑ "- IRANIAN CYBER THREAT TO THE U.S. HOMELAND". Govinfo.gov. Archived from the original on 28 October 2021. Retrieved 28 October 2021.
  7. ↑ "Iran 'hides spyware in wallpaper, restaurant and games apps'". BBC News. 8 February 2021. Archived from the original on 7 August 2021. Retrieved 28 October 2021.
  8. 1 2 "Iran's electronic confrontation with Israel". The Economist. ISSN 0013-0613. Retrieved 18 August 2024.
  9. 1 2 Irwin, Zane (14 July 2026). "Iranian Cyberattackers Tracked Phones of U.S. Military Personnel, Data Suggests". The New York Times. ISSN 0362-4331. Retrieved 30 July 2026.
  10. ↑ Singer, P. W.; Friedman, Allan (March 2014). Cybersecurity and cyberwar: what everyone needs to know. Oxford University Press. ISBN 978-0-19-991809-6. OCLC 802324804.
  11. ↑ Green, James A., ed. (7 November 2016). Cyber warfare: a multidisciplinary analysis. London: Routledge. ISBN 978-0-415-78707-9. OCLC 980939904.
  12. ↑ "Cyberwar – does it exist?". NATO. 13 June 2019. Retrieved 10 May 2019.
  13. ↑ Smith, Troy E. (2013). "Cyber Warfare: A Misrepresentation of the True Cyber Threat". American Intelligence Journal. 31 (1): 82–85. ISSN 0883-072X. JSTOR 26202046.
  14. ↑ Lucas, George (2017). Ethics and Cyber Warfare: The Quest for Responsible Security in the Age of Digital Warfare. Oxford University Press. p. 6. ISBN 978-0-19-027652-2.
  15. ↑ Newman, Lily Hay (6 May 2019). "What Israel's Strike on Hamas Hackers Means for Cyberwar". Wired. ISSN 1059-1028. Retrieved 10 May 2019.
  16. ↑ Liptak, Andrew (5 May 2019). "Israel launched an airstrike in response to a Hamas cyberattack". The Verge. Retrieved 10 May 2019.
  17. 1 2 "Stuxnet and the Future of Cyber War". James P. Farwell and Rafal Rohozinski.
  18. ↑ Cunningham, Fiona S. (2025). Under the Nuclear Shadow: China's Information-Age Weapons in International Security. Princeton University Press. doi:10.2307/jj.16040335. ISBN 978-0-691-26103-4. JSTOR jj.16040335.
  19. 1 2 3 "US General: Iran's Cyber War Machine 'A Force To Be Reckoned With'". Business Insider. Archived from the original on 2 April 2019. Retrieved 14 November 2017.
  20. ↑ "شکست حملات سایبری در مقابل"دژفا"". 9 February 2020. Archived from the original on 9 February 2020. Retrieved 28 October 2021.
  21. ↑ "آغاز جلسه علنی مجلس/ طرح تشکیل سازمان پدافند غیرعامل در دستور". 6 November 2022. Archived from the original on 13 November 2022. Retrieved 13 November 2022.
  22. ↑ McElroy, Damien (2 October 2013). "Iranian cyber warfare commander shot dead in suspected assassination". The Telegraph. Archived from the original on 7 October 2019. Retrieved 18 March 2015.
  23. ↑ "Iran accuses Israel of failed cyber attack". Reuters. 5 November 2018. Archived from the original on 28 May 2020. Retrieved 6 November 2018.
  24. ↑ "Iran accuses Israel of failed cyber attack – CNA". Archived from the original on 10 September 2019. Retrieved 6 November 2018.
  25. ↑ Browne, Ryan; Turak, Natasha (5 October 2022). "Hacktivists seek to aid Iran protests with cyberattacks and tips on how to bypass internet censorship". CNBC. Archived from the original on 13 January 2023. Retrieved 9 March 2023.
  26. ↑ "ماجرای حمله سایبری به سایت وزارت علوم چه بود؟". اعتمادآنلاین (in Persian). 24 September 2023. Retrieved 24 September 2023.
  27. ↑ فردا, رادیو (24 September 2023). "سایت وزارت علوم ایران "هک شد"؛ هکرها می‌گویند به "بیش از ۲۰ هزار سند" دست یافته‌اند". رادیو فردا (in Persian). Retrieved 24 September 2023.
  28. ↑ قربانی, زهرا (23 September 2023). "ماجرای هک سایت وزارت علوم چیست؟ / سامانه‌های دولتی زیر ذره‌بین هکر‌ها". راه پرداخت (in Persian). Retrieved 24 September 2023.
  29. ↑ "واکنش عجیب رییس بنیاد شهید به هک شدن سرورهای این سازمان؛ اطلاعاتی حساسی نداشتیم!". اعتمادآنلاین (in Persian). 24 September 2023. Retrieved 24 September 2023.
  30. ↑ "ماجرای هک سایت وزارت امور خارجه چه بود؟". اعتمادآنلاین (in Persian). 24 September 2023. Retrieved 24 September 2023.
  31. ↑ "هک شرکت‌های بیمه در ایران و نگرانی از ضعف امنیت سایبری". BBC News فارسی (in Persian). 4 September 2023. Retrieved 24 September 2023.
  32. ↑ فردا, رادیو (4 September 2023). "برکناری رئیس کل بیمه مرکزی ایران در پی اخبار "هک اطلاعات ۱۸ شرکت بیمه"". رادیو فردا (in Persian). Retrieved 24 September 2023.
  33. ↑ "پس‌لرزه‌های هک اطلاعات ۱۸ شرکت بیمه؛ رئیس کل بیمه مرکزی ایران برکنار شد". صدای آمریکا (in Persian). 4 September 2023. Retrieved 24 September 2023.
  34. ↑ "ابعاد هک و انتشار اطلاعات شخصی خبرنگاران و کارکنان خبرگزاری فارس بررسی شود". اعتمادآنلاین (in Persian). 24 September 2023. Retrieved 24 September 2023.
  35. ↑ قربانی, زهرا (20 September 2023). "ماجرای هک سازمان ثبت‌احوال چه بود؟". راه پرداخت (in Persian). Retrieved 24 September 2023.
  36. ↑ "هشدار هکرهای بلک رویوارد: اگر رژیم به خواست مردم تن ندهد، اسناد هسته‌ای را رو می کنیم". ایران اینترنشنال (in Persian). 22 September 2023. Retrieved 24 September 2023.
  37. ↑ "سند هک شده: وزارت خارجه جمهوری اسلامی نشستی برای مدیریت بحران پهپادی در اوکراین برگزار کرد". ایران اینترنشنال (in Persian). 25 January 2024. Retrieved 25 January 2024.
  38. ↑ "اختلال سراسری در پمپ بنزین‌های ایران؛ "گنجشک درنده": حمله سایبری کار ما بود". BBC News فارسی (in Persian). 18 December 2023. Retrieved 25 January 2024.
  39. ↑ "هکرهای شرکت «اسنپ فود» نهایی شدن دریافت باج را تائید کردند". BBC News فارسی (in Persian). 1 January 2024. Retrieved 1 March 2024.
  40. ↑ فردا, رادیو (13 February 2024). "روابط عمومی مجلس هک وب‌سایت‌ها و «دسترسی» هکرها به اسناد مجلس را تأیید کرد". رادیو فردا (in Persian). Retrieved 1 March 2024.
  41. ↑ "هک وب‌سایت‌های مجلس؛ هکرها «حقوق ۲۰۰ میلیونی» نمایندگان و مزایایی مانند «آجیل شب یلدا» را فاش کردند". صدای آمریکا (in Persian). 13 February 2024. Retrieved 1 March 2024.
  42. ↑ "حمله سایبری هکرهای روسی به سفارت‌خانه‌های جمهوری اسلامی". ایران اینترنشنال (in Persian). 1 March 2024. Retrieved 1 March 2024.
  43. ↑ "Justice Of Iran". 21 February 2024. Archived from the original on 21 February 2024. Retrieved 1 March 2024.
  44. ↑ "هکرهای گمنام چهارده گیگابایت اطلاعات از سرورهای دانشگاه صنعتی مالک اشتر استخراج کردند". صدای آمریکا (in Persian). 22 February 2024. Retrieved 1 March 2024.
  45. ↑ "US Cyberattack Hit 2 Iranian Military Ships in Red Sea". Voice of America. 16 February 2024. Retrieved 1 March 2024.
  46. ↑ "زارع‌پور، وزیر ارتباطات: نمی‌خواهیم مردم از حملات سایبری مطلع شوند". 16 May 2024.
  47. ↑ "سایت سازمان حج و زیارت هک شد؟". June 2024.
  48. ↑ "سایت وزارت علوم پس از حمله هکری به طور موقت از دسترس خارج شد". 8 June 2024.
  49. ↑ "Israel-Hezbollah war: Iran hit by massive cyberattacks; "nuclear facilities and government agencies targeted"". The Times of India. 13 October 2024.
  50. ↑ Carsten, Paul; Dutta, Prasanta Kumar (7 January 2025). "How Iran moves sanctioned oil around the world". Reuters. Retrieved 21 March 2025.
  51. ↑ "simorgh.io". simorgh.io. Retrieved 21 March 2025.
  52. ↑ "Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign". The Hacker News. Retrieved 19 March 2026.
  53. ↑ ""اسرائیل با هک تلفن محافظان فرماندهان ایران را هدف قرار داد" – DW – ۱۴۰۴/۶/۹". dw.com (in Persian). Retrieved 19 December 2025.
  54. ↑ "دلیل اختلال جی‌پی‌اس در ایران چیست و چقدر می‌تواند خطرناک باشد؟". BBC News فارسی (in Persian). 10 July 2025. Retrieved 19 March 2026.
  55. ↑ "The 2025 Cloudflare Radar Year in Review- the rise of AI, post-quantum, and record-breaking DDoS attacks". The Cloudflare Blog. 15 December 2025. Retrieved 19 December 2025.
  56. ↑ "گزارش جنجالی کلودفلر از اینترنت ایران در سال ۲۰۲۵". Fararu | فرارو (in Persian). Archived from the original on 19 December 2025. Retrieved 19 December 2025.
  57. ↑ "New Iran law to up Starlink punishments, use for spying will carry death". Iranintl.com. 10 October 2025. Retrieved 19 December 2025.
  58. ↑ "Reeling from Israel war, Iran expands espionage law, bans Starlink use – AL-Monitor: The Middle Eastʼs leading independent news source since 2012". Al-monitor.com. Retrieved 19 December 2025.
  59. ↑ "Iran Set to Enforce Death Penalty for Starlink Satellite Internet Use". Algemeiner.com. Retrieved 19 December 2025.
  60. ↑ "ایران یک متخصص حوزه دیتابیس را به عنوان «جاسوس مورد وثوق» اسرائیل اعدام کرد". euronews (in Persian). 29 September 2025. Retrieved 19 December 2025.
  61. ↑ "قوه قضائیه ایران: متخصص دیتابیس شرکت دانش‌بنیان به جرم جاسوسی برای اسرائیل اعدام شد". BBC News فارسی (in Persian). 29 September 2025. Retrieved 19 December 2025.
  62. ↑ "ادعای یک هکر: اطلاعات ۶۹ میلیون ایرانی برای فروش در اختیار من است". روزنامه دنیای اقتصاد (in Persian). Archived from the original on 19 December 2025. Retrieved 19 December 2025.
  63. ↑ "برطرف شدن اختلال نسخه موبایلی این بانک در این تاریخ". شهر خبر. 11 March 2026.
  64. ↑ Genn, James (10 March 2026). "Iran's Melli, Sepah banks reported outages, service disruptions, IRGC-linked media report". The Jerusalem Post.
  65. ↑
  66. ↑ "سخنگوی کمیسیون اقتصادی مجلس: بانک ها باید امنیت سایبری در سامانه بانکداری کشور را برقرار کنند". 21 June 2026.
  67. ↑ "توضیح بانک مرکزی درباره اختلال در عملیات ۴ بانک +جزئیات". روزنامه دنیای اقتصاد. 30 July 2026.
  68. ↑ "بانک مرکزی: اختلال عمدی در خدمات چهار بانک صحت ندارد". Iranintl.com. 19 June 2026.
  69. ↑ سمیع, سمانه; کریمی, رضا (20 June 2026). "بحران چهار بانک ضعف مدیریت روایت‌ در زمان بحران را آشکار کرد".
  70. ↑ "ابهام در واریز یارانه خرداد؛ بانک مرکزی اختلال را رد کرد!". جهان نيوز. 21 June 2026.
  71. ↑ "2 New Jersey municipal water systems targeted in cyberattacks". ABC News. Retrieved 10 August 2026.
  72. ↑ "Map shows states hit by cyberattacks on water systems". Newsweek. 2 August 2026. Retrieved 10 August 2026.
  73. ↑ Lyons, Jessica (7 August 2026). "Water system controllers don't belong on the internet, says ex-NSA chief after suspected Iran attacks". theregister. Retrieved 10 August 2026.
  74. ↑ "Silent War" Archived 15 November 2014 at the Wayback Machine July 2013 Vanity Fair
  75. ↑ Joseph Marks (22 April 2015). "Iran launched major cyberattacks on the Israeli Internet". Politico. Archived from the original on 10 November 2014. Retrieved 27 April 2015.
  76. ↑ Micah Halpern (22 April 2015). "Iran Flexes Its Power by Transporting Turkey to the Stone Age". Observer. Archived from the original on 14 December 2019. Retrieved 27 April 2015.
  77. ↑ "Iran blamed for cyberattack on Parliament that hit dozens of MPs, including Theresa May". The Telegraph. 14 October 2017. Archived from the original on 6 December 2017. Retrieved 6 December 2017.
  78. ↑ "Iranian Advanced Persistent Threat Actor Identified Obtaining Voter Registration Data | CISA". Cisa.gov. 3 November 2020.
  79. ↑ "Israel's Jerusalem Post Website Hacked". Reuters. 3 January 2022. Archived from the original on 3 January 2022. Retrieved 3 January 2022.
  80. ↑ "Jerusalem Post website hacked with Iran warning on anniversary of Soleimani killing". The Times of Israel. Archived from the original on 3 January 2022. Retrieved 3 January 2022.
  81. ↑ Yonah Jeremy Bob (14 March 2022). "Cyberattack against Israeli sites follows reports of failed Mossad op against Iran". The Jerusalem Post. Archived from the original on 14 March 2022. Retrieved 14 March 2022.
  82. ↑ Yaniv Kubovich. "Israeli Government Sites Crash in Cyberattack". Haaretz. Archived from the original on 14 March 2022. Retrieved 14 March 2022.
  83. ↑ "New Entries in the CFR Cyber Operations Tracker: Q3 2022". Council on Foreign Relations. Archived from the original on 26 April 2023. Retrieved 9 March 2023.
  84. ↑ "Albania cuts diplomatic ties with Iran, boots out diplomats over July cyberattack". The Times of Israel. ISSN 0040-7909. Archived from the original on 17 November 2022. Retrieved 9 March 2023.
  85. ↑ "Iranian hackers compromise US government network in cryptocurrency generating scheme, officials say". CNN. Archived from the original on 17 November 2022. Retrieved 17 November 2022.
  86. ↑ "Iranian hacker group Agrius launches Moneybird ransomware attacks on Israeli entities". 2-spyware.com. 25 May 2023. Retrieved 25 May 2023.
  87. ↑ Kleinman, Danielle (7 March 2023). "Iran Launches Cyberattack on Israeli University". FDD. Retrieved 25 May 2023.
  88. ↑ "Iran suspect in cyberattack targeting Israeli shipping, financial firms – Al-Monitor: Independent, trusted coverage of the Middle East". Al-monitor.com. 24 May 2023. Retrieved 25 May 2023.
  89. ↑ Sabin, Sam (2 May 2023). "The Iranian government is joining Russia and China in promoting disinformation campaigns". Axios.
  90. ↑ "هکرهای سپاه پاسداران مخالفان رژیم جمهوری اسلامی را در آلمان هدف قرار می‌دهند". ایران اینترنشنال (in Persian). 25 January 2024. Retrieved 25 January 2024.
  91. ↑ Kohli, Pankaj (27 July 2023). "Uncovering an Iranian mobile malware campaign". Sophos News. Retrieved 2 December 2023.
  92. ↑ Lyngaas, Sean; Sgueglia, Kristina (28 November 2023). "Federal officials investigating after pro-Iran group allegedly hacked water authority in Pennsylvania". CNN. Retrieved 29 November 2023.
  93. ↑ "حمله سایبری هکرهای جمهوری اسلامی موجب قطع آب منطقه‌ای در ایرلند شد". ایران اینترنشنال (in Persian). 1 March 2024. Retrieved 1 March 2024.
  94. ↑ "OilRig's persistent attacks using cloud service-powered downloaders". Welivesecurity.com. Retrieved 25 January 2024.
  95. ↑ "Disrupting malicious uses of AI by state-affiliated threat actors". 14 February 2024.
  96. ↑ "Staying ahead of threat actors in the age of AI". Microsoft. 14 February 2024.
  97. ↑ "Iran-linked Website Leaks Secret Israeli Data - National Security". Haaretz.com. Retrieved 27 August 2026.
  98. ↑ Sabin, Sam (9 August 2024). "Iran is already trying to hack presidential campaign officials leading up to 2024 Election Day". Axios.
  99. ↑ "MuddyWater Threat Group Deploys New BugSleep Backdoor". Check Point Blog. 15 July 2024.
  100. ↑ Menn, Joseph (9 August 2024). "Iran uses fake news sites to interfere in U.S. election, Microsoft says". The Washington Post.
  101. ↑ "US says Iran emailed stolen Trump campaign material to Biden camp". Reuters News. 19 September 2024. Retrieved 19 September 2024.
  102. ↑ Olsen, Jan M. (24 September 2024). "Iran was behind thousands of text messages calling for revenge over Quran burnings, Sweden says". AP News.
  103. ↑ Kirby, Paul. "Sweden blames Iran for cyber-attack after Quran burnings". BBC News.
  104. ↑ "New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad" (PDF). Internet Crime Complaint Center.
  105. ↑ "Malware Spotlight: A Deep-Dive Analysis of WezRat". Check Point Research. 14 November 2024. Retrieved 15 November 2024.
  106. ↑ "Iranian "Dream Job" Campaign 11.24". ClearSky Cyber Security.
  107. ↑ Prajeet Nair (14 November 2024). "Iranian Threat Actors Mimic North Korean Job Scam Techniques". BankInfoSecurity. Retrieved 26 December 2024.
  108. ↑ Allison, George (1 October 2024). "UK warns of Iranian state-sponsored phishing attacks". Retrieved 26 December 2024.
  109. ↑ "Kash Patel, Trump's pick to lead FBI, has been targeted in an Iranian hack, sources say | CNN Politics". CNN. 4 December 2024. Retrieved 21 March 2025.
  110. ↑ "threat-research/indicators/csv/Q3_2024/Q3_2024 IRAN_BASED_CIB_NETWORK.csv at main · facebook/threat-research". GitHub. Retrieved 21 March 2025.
  111. ↑ "Adversarial Threat Report" (PDF). Archived from the original (PDF) on 4 December 2024. Retrieved 19 March 2026.
  112. ↑ "Cyber group says it disrupted Iranian shipping communications". Iranintl.com. 18 March 2025. Retrieved 21 March 2025.
  113. ↑ "بانک سپه: ادعای هک‌شدن اطلاعات کذب محض است؛ هکرها نمونه اطلاعات مشتریان را منتشر کردند". دیجیاتو (in Persian). Retrieved 19 March 2026.
  114. ↑ "Iranian hacker group targets Israeli kindergartens' PA systems". Iranintl.com. 27 January 2025. Retrieved 21 March 2025.
  115. ↑ "Generative AI makes Chinese, Iranian hackers more efficient, report says". Voice of America. 29 January 2025. Retrieved 21 March 2025.
  116. ↑ "Israel denies Iran-linked hacking group breached police systems". Iranintl.com. 9 February 2025. Retrieved 21 March 2025.
  117. ↑ "New DDoS Botnet Discovered: Over 30,000 Hacked Devices, Majority of Observed Activity Traced to Iran". Greynoise.io. Retrieved 21 March 2025.
  118. ↑ "یک گروه هکری مدعی نفوذ به سرورهای همراه اول شد" [A hacking group claimed to have infiltrated the servers of Mobile Telecommunications Company of Iran] (in Persian). 23 March 2025. Archived from the original on 13 April 2025.
  119. ↑ "Iran repelled large cyber attack on Sunday". Reuters.com. 28 April 2025.
  120. ↑ "Iranian Cyber Actors Impersonate Model Agency in Suspected Espionage Operation". Unit42.paoaltonetworks.com. 7 May 2025. Retrieved 19 March 2026.
  121. ↑ Anvari, Amirhadi (12 May 2025). "Iranian military front company masked identity to sell oil, documents show". Iranintl.com. Retrieved 19 March 2026.
  122. ↑ "Meta says it disrupted influence operations linked to China, Iran, Romania". Therecord.media. Retrieved 19 March 2026.
  123. ↑ "Office of Public Affairs | Iranian Man Pleaded Guilty to Role in Robbinhood Ransomware | United States Department of Justice". Justice.gov. 27 May 2025. Retrieved 19 March 2026.
  124. ↑ "Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware". The Hacker News. Retrieved 19 March 2026.
  125. ↑ Sabin, Sam (27 March 2026). "Iran-linked group claims hack of FBI Director Kash Patel". Axios. Retrieved 27 March 2026.
  126. ↑ Tucker, Eric (27 March 2026). "Pro-Iranian group claims credit for hack of FBI Director Kash Patel's personal account". Associated Press. Retrieved 29 March 2026.
  127. ↑ "Iranians report banking disruptions as cards and POS payments fail". Iranintl.com. 13 June 2026.
  128. ↑ Arghire, Ionut (12 June 2026). "Iranian Cyber Group Handala Claims Cal Water Hack". Securityweek.com.
  129. ↑ Cimili, Zana (10 June 2026). "Albanian PM says Iran cyber op is amplifying protests against Kushner-linked development plan". Timesofisrael.com.
  130. ↑ "Gambit links Iran-linked Black Shadow group to destructive cyber campaign targeting US, Middle East organizations". Industrialcyber.co. Retrieved 27 August 2026.
  131. ↑ Lyngaas, Sean (22 May 2026). "Iranian hackers are targeting aviation, oil and gas companies in espionage scheme, researchers say". Cnn.com.
  132. ↑ Thompson, Howard (28 July 2026). "More than 30 Minnesota water systems targeted in cyberattack". KMSP-TV. Retrieved 30 July 2026.
  133. ↑ Vicens, A.J. (18 August 2026). "DOJ unseals new charges against 17 hackers in Iran-backed campaign". Reuters. Retrieved 19 August 2026.
  134. ↑ "Iranian hackers shut down small UK power plant for days — report". The Times of Israel. 23 August 2026. Retrieved 23 August 2026.
  135. ↑ "Lookout Discovers Android Spyware Tied to Iranian Police Targeting Minorities: BouldSpy". Archived from the original on 1 May 2023. Retrieved 30 April 2023.
  136. ↑ "Rinse and repeat: Iran accelerates its cyber influence operations worldwide". 2 May 2023.
  137. ↑ https://www.axios.com/2026/08/27/facebook-instagram-iran-ai-disinformation
  138. ↑ https://www.darivoa.com/a/us-offers-10-million-reward-for-information-on-two-iranian-cyber-actors/8089209.html
  139. ↑ https://www.iranintl.com/202512034750
  140. ↑ "امیر براتی؛ روایت هکر نابغه ایرانی از همکاری با وزارت اطلاعات تا افتادن در دام اف‌بی‌آی". exclusive.iranintl.com. Retrieved 4 August 2026.
  141. 1 2 "Facebook says it dismantles disinformation network tied to Iran's state media". REUTERS. 5 May 2020. Archived from the original on 21 August 2021. Retrieved 28 October 2021.
This page is issued from Wikipedia. The text is available under Creative Commons Attribution-Share Alike 4.0 unless otherwise noted. Additional terms may apply for the media files.