--- title: Iran's cyberwar has begun | daily.dev description: Iranian state-sponsored hackers have escalated cyber operations following US and Israel military strikes, conducting API probing, DDoS attacks, spearphishing,... canonical: https://daily.dev/posts/iran-s-cyberwar-has-begun-rzmct4cyp twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Iran's cyberwar has begun | daily.dev og:description: Iranian state-sponsored hackers have escalated cyber operations following US and Israel military strikes, conducting API probing, DDoS attacks, spearphishing,... og:url: https://daily.dev/posts/iran-s-cyberwar-has-begun-rzmct4cyp og:image: https://api.daily.dev/og/posts/Rzmct4CYP.png og:image:alt: Iran's cyberwar has begun og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Iran's cyberwar has begun **[The Register](https://daily.dev/sources/theregister)** · 6 min read · 0 upvotes · 0 comments ## Summary Iranian state-sponsored hackers have escalated cyber operations following US and Israel military strikes, conducting API probing, DDoS attacks, spearphishing, and staging malware against targets in Israel and the Persian Gulf. Groups like Cotton Sandstorm (IRGC-affiliated) are deploying tools such as WezRat infostealer and WhiteLock ransomware. Security researchers warn US organizations—especially defense contractors, government suppliers, and critical infrastructure operators—to treat targeting as inevitable. Disinformation campaigns on social media are also a key component of Iran's playbook. Experts advise patching all critical systems, reinforcing security awareness training, and treating claims of attacks on social media with skepticism. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Cyberattacks Spike 245% in the Two Weeks After the Start of War with Iran](https://daily.dev/posts/cyberattacks-spike-245-in-the-two-weeks-after-the-start-of-war-with-iran-jwd6od1zp) · Security Boulevard · 1 upvotes · 0 comments - [Iran Has One Card Left—It’s Pointed at Your Network](https://daily.dev/posts/iran-has-one-card-left-it-s-pointed-at-your-network-addufvvtx) · Security Boulevard · 0 upvotes · 0 comments - [Middle East Cyber Battle Field Broadens — Especially in UAE](https://daily.dev/posts/middle-east-cyber-battle-field-broadens-especially-in-uae-xm0lzyz2w) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/iran-s-cyberwar-has-begun-rzmct4cyp) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Iran's cyberwar has begun","url":"https://daily.dev/posts/iran-s-cyberwar-has-begun-rzmct4cyp","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/iran-s-cyberwar-has-begun-rzmct4cyp"},"datePublished":"2026-03-02T20:55:34.708Z","dateModified":"2026-03-04T13:18:58.001Z","description":"Iranian state-sponsored hackers have escalated cyber operations following US and Israel military strikes, conducting API probing, DDoS attacks, spearphishing,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/060381b95151898bf55457af4557ad35?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/060381b95151898bf55457af4557ad35?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/iran-s-cyberwar-has-begun-rzmct4cyp","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,ransomware","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Iran's cyberwar has begun"}]} ```