Intelligence firms watch for uptick in Iran cyber activity after US, Israel strikes

"CrowdStrike has 'not observed large-scale state-sponsored cyber campaigns' but is seeing 'a surge in claimed activity from Iran-aligned and sympathetic hacktivist groups, including assertions of disruptive actions such as [denial-of-service] operations, defacements and alleged interference across targets in the Middle East, the United States and parts of Asia.'"

"Critical infrastructure and financial sector firms 'should remain vigilant for follow-on activity that moves beyond nuisance-level disruption into more coordinated or destructive operations,' with expectations that Iran will target the U.S., Israel, and Gulf Cooperation Council countries with disruptive cyberattacks focusing on targets of opportunity and critical infrastructure."

"Iran 'has historically had mixed results with disruptive cyberattacks, and they frequently fabricate and exaggerate their effects in an effort to boost their psychological impact,' though their attacks can have serious impacts on individual enterprises, making it important to take their claims with skepticism."

Following coordinated U.S. and Israeli strikes on Iran, cyber intelligence firms report increased Iranian cyber activity and preparation for potential attacks. CrowdStrike observes a surge in claimed activity from Iran-aligned hacktivist groups conducting denial-of-service operations, defacements, and interference across Middle Eastern, U.S., and Asian targets. While large-scale state-sponsored campaigns have not yet materialized, critical infrastructure and financial sector firms face heightened risk. Experts expect Iran to target the U.S., Israel, and Gulf Cooperation Council countries with disruptive cyberattacks on critical infrastructure. However, Iran has historically achieved mixed results with such operations and frequently exaggerates attack effects for psychological impact.

Read at Nextgov.com