Iran's cyberwar has begun
Security researchers warn that Iranian-linked threat groups have escalated cyber operations following US and Israeli missile strikes, launching probing attacks, DDoS campaigns, malware staging, and disinformation efforts. Much of the activity has targeted Israel and Gulf states so far, but analysts say US organizations — especially defense contractors and critical infrastructure operators — should expect inevitable targeting. Groups tied to Iran’s IRGC, including Cotton Sandstorm and CyberAv3ngers, are reportedly reviving ransomware-style and sabotage campaigns, alongside psychological operations on social media. Experts caution that some claims may be exaggerated for propaganda impact, but organizations should prepare for sustained elevated cyber activity.