国产诱惑福利

Iran has in its offensive cyber capabilities while cultivating ties to hacking groups. In recent years, groups working for Tehran have infiltrated the email system of President Donald Trump's campaign, and tried to breach the networks used by the military and defense contractors.

The goal is to wear down the American war effort, drive up the costs of energy, strain cyber resources and cause as much pain as possible for American companies that depend on the defense industry.

鈥淪omething is going to happen because the ," said Kevin Mandia, founder of the cybersecurity companies Mandiant and Armadin.

Who is being targeted

Pro-Iranian, pro-Palestinian hackers claimed credit for , a Michigan-based medical technology company. A group known as Handala said the attack was in retaliation for suspected U.S. .

Like other ideologically motivated hackers, profit is not Handala鈥檚 goal, according to Ismael Valenzuela, vice president of threat intelligence at the cybersecurity company Arctic Wolf.

鈥淲hat distinguishes this group is its clear focus on data destruction rather than financial extortion,鈥� he said in an email.

Polish authorities are investigating a recent cyberattack 鈥� on a nuclear research facility 鈥� that may have ties to Iran, though they acknowledge that another group could be behind the attack and using the Iran war to mask its identity.

Going forward, U.S. defense contractors, government vendors and businesses that work with Israel are likely targets, as is critical infrastructure such as , , water plants, and .

Pro-Iranian hackers openly discuss their plans in Telegram and other online message boards.

鈥淭丑别 need to be taken out,鈥� wrote one user, as uncovered by researchers at U.S.-based SITE Intelligence Group. 鈥淭丑别y host the brains of USAs military communication and targeting systems.鈥�

Cyber operations also gather intelligence 鈥� for example, Iran's effort to hack into cameras in neighboring countries to aid its missile targeting. Infiltrating U.S. networks, meanwhile, would offer view into military planning or supply chains.

Going after easy targets

The strikes on Iran's military as well as internet outages may have limited Iran's cyberattacks in the short term. But experts say Iranian hackers and their allies will aim for quick victories by targeting the weakest links in American cybersecurity.

Often, local or lack the funds and know-how to install the latest software patches or take other security steps. That has made them a both because of the relative ease of penetrating them and because of the panic these disruptions can cause.

This can include , in which hackers try to jam a network so legitimate users cannot use it, and website defacements, which can prevent a company from communicating with customers. Hack-and-leak operations, where hackers threaten to release sensitive stolen material, are another possibility.

The attacks are not that sophisticated, according to Shaun Williams, a former FBI and CIA officer who is now a senior director at the cybersecurity firm SentinelOne. But if a business or government agency has failed to keep up with its cybersecurity, it could pay a steep price, he said.

鈥淧atch your systems. Ensure your firewalls and security solutions are up to date,鈥� Williams said. 鈥淩emove your stale accounts. All the cyber hygiene that you should be doing, it鈥檚 more critical now than ever. Prepare for disruption.鈥�

When it comes to cyber, Iran is considered a chaos agent

Russia and China present the greatest cyber threats to the U.S., while North Korea is a growing concern. But what Iran has lacked in resources it has , experts say.

In recent years, Tehran's digital warriors have impersonated American activists online to covertly encourage on college campuses. They have set up fake news websites and social media accounts primed to spread false and exaggerated claims before big U.S. elections.

In 2024, Iranian hackers of the Trump campaign and later that the hackers said they stole. Hackers linked to Iran also of both Trump and his then-Democratic opponent, President Joe Biden.

The activity prompted the Department of Homeland Security to last year about Iranian cyber threats.

鈥淚ran and especially the proxies don鈥檛 care how big or smart you are. This is about making an impact, about creating chaos,鈥� said James Turgal, a cybersecurity expert who spent 22 years as an FBI agent and is now a vice president at Optiv, a Denver-based information security firm.

Next moves from Russia and China

Experts are watching closely to see if Russia, China or hacking groups allied with either country provide hacking assistance to Iran, mounting attacks intended to undermine American operations in Iran and make it harder for the U.S. to sustain its fight.

While China has so far taken a cautious approach, there is evidence that pro-Iranian hackers in Russia are already at work. Researchers at the cybersecurity firm CrowdStrike detected a surge of activity from Russian hackers in support of Tehran since the war began.

One group known as Z-Pentest claimed responsibility for disrupting several U.S. networks, including some involved in closed-circuit video cameras.

The timing of the attack suggests the hackers were targeting U.S. interests because of the war in Iran, according to Adam Meyers, head of counter adversary operations at CrowdStrike.

鈥淲estern organizations should continue to remain on high-alert,鈥� Meyers said.