Despite a cease-fire in traditional military engagements lasting over a week, Iranian cyber operations have intensified, according to cybersecurity experts. Following the cessation of hostilities with the United States on April 8, Iran has maintained its online activities, aiming to exert pressure on both the U.S. and Israel while preparing for potential escalations in negotiations.
Since the beginning of the conflict in late February, Iran has employed a combination of real-world attacks and cyber tactics, including disinformation campaigns and advanced hacking efforts. Notably, a significant incident involved a global shutdown at Stryker, a major medical equipment supplier, which caught security analysts off guard.
Iranian hackers are increasingly targeting U.S. and Israeli officials, alongside attempts to infiltrate essential infrastructure, such as water and power systems. This shift towards espionage reflects a tactical change as Tehran prepares for future operations that could inflict societal disruptions if diplomatic dialogue fails to progress.