New Delhi: The Iran–Israel conflict is rapidly evolving beyond conventional military engagement, with cyberspace emerging as a critical battleground. A new research note by Algoritha Security highlights how the conflict has entered a more aggressive digital phase, characterized by coordinated cyber offensives, psychological operations, and growing regional risks.
Escalation Through Coordinated Cyber Disruption
Recent incidents underscore this escalation. In late February 2026, multiple Iranian apps and government-linked platforms were hacked amid ongoing military strikes, with coordinated cyber intrusions disrupting services and spreading anti-regime messaging. Analysts observed a sharp drop in national internet connectivity during the attacks, indicating possible cyber-enabled disruption efforts.
FCRF Launches Flagship Certified Fraud Investigator (CFI) Program
Hacktivists and APT Groups Enter the Arena
The report notes that both pro-Iranian and pro-Israeli cyber groups are now actively engaged, leveraging tactics ranging from distributed denial-of-service (DDoS) attacks and website defacements to more sophisticated intrusion campaigns. Historically, Iran-linked advanced persistent threat (APT) groups—often associated with the Islamic Revolutionary Guard Corps—have targeted Israeli infrastructure through phishing, malware, and espionage operations, while Israeli-linked actors have demonstrated capabilities to disrupt financial systems and critical services.
Two-Tier Cyber Warfare Strategy
A key trend identified is the dual-layer nature of cyber warfare. On the surface, low-to-mid sophistication attacks such as DDoS and defacements are being used for visibility and narrative control. Beneath this, more covert and persistent campaigns continue to target critical infrastructure, including banking, energy, and telecommunications sectors. Reports indicate that dozens of hacktivist groups—many aligned with Iran—have been launching sustained attacks, at times reaching dozens of incidents per day.
Regional Spillover Risks
The research also warns of regional spillover risks, with cyber operations extending beyond the immediate conflict zone into countries across the Middle East and beyond. Previous patterns show attacks impacting nations such as Egypt, the UAE, and Saudi Arabia, highlighting the interconnected nature of modern digital infrastructure.
Cyber Warfare as Central Doctrine
As geopolitical tensions intensify, cybersecurity experts caution that cyber operations are no longer auxiliary but central to modern warfare. For organizations and governments alike, the Iran–Israel cyber confrontation signals a new reality—where conflicts are fought simultaneously on physical and digital fronts, demanding heightened vigilance, resilience, and proactive defense strategies.
