The escalating tensions between Israel and Iran are rapidly extending into cyberspace, with both sides launching a series of digital attacks alongside conventional military operations. This shift highlights a key reality: modern conflicts increasingly involve attacks on infrastructure, information, and trust, not just physical targets.
The New Front: Digital Strikes and Countermeasures
Recent weeks have seen a surge in cyber activity coinciding with Operation Roaring Lion – the joint US-Israel military operation against Iran. Iran has retaliated by targeting key infrastructure and spreading disruption through malicious software and disinformation.
One example is the hacking of the BadeSaba Calendar app, a popular religious tool used by over five million people. Users were hit with alarming notifications hinting at impending conflict, a clear psychological operation designed to destabilize public confidence.
Groups like the Islamic Cyber Resistance Axis have claimed responsibility for attacks on Israeli defense companies, including Rafael and VigilAir. Meanwhile, Iranian hacker persona Handla Hack has threatened further attacks across the Middle East, backed by Iran’s Ministry of Intelligence and Security (MOIS).
US Information Warfare and Iranian Retaliation
The United States is reportedly employing an “information warfare campaign” aimed at undermining the Iranian regime, pressuring officials to defect, and disrupting military operations. This strategy signals a willingness to use non-kinetic methods to weaken Iran’s capabilities and stability.
In response, Iran is mobilizing state-sponsored hacking groups like APT42 and APT33 (MuddyWater), known for their ties to the Islamic Revolutionary Guard Corps (IRGC) and MOIS. These groups are likely to focus on Israeli and American defense, government, and intelligence networks in the coming days.
The tactics favored by Iranian hackers include deploying wiper malware (designed to erase data permanently) and launching Distributed Denial-of-Service (DDoS) attacks to overwhelm online services. They may also amplify disinformation campaigns to shape public perception of any military failures or civilian impact.
Israel’s Cyber Capabilities: A History of Offense and Defense
Israel is not defenseless in this digital war. The Israeli Defense Forces (IDF) maintain Unit 8200, a cyberdefense organ that works closely with the US National Security Agency (NSA). Unit 8200 is credited with significant cyber operations, including the Stuxnet attacks in the 2010s, which crippled Iran’s uranium enrichment facilities.
Israel has also faced accusations of using spyware to surveil its citizens, including claims that WhatsApp was exploited during last year’s conflict. These allegations raise ethical and legal questions about the extent of state-sponsored surveillance.
The Bigger Picture: Why Cyber Warfare Matters
This escalation in cyber warfare underscores a critical trend: conflicts are no longer limited to traditional battlefields. Cyberattacks can disrupt critical infrastructure, spread misinformation, and erode public trust – all without firing a single shot.
The use of malware, DDoS attacks, and disinformation campaigns is now an integral part of modern warfare. As both Israel and Iran continue to escalate tensions, the digital front will likely become even more prominent, with potentially far-reaching consequences for regional stability and global cybersecurity.
