As missile sirens wailed over Israel earlier this month, thousands of Israelis received texts claiming to be from their military, encouraging them to download a fake shelter app, which could have stolen reams of personal data.
Others received a mass text saying: “Netanyahu is dead. Death is approaching you and soon the gates of hell will open before you. Before the fire of Iranian missiles destroys you, leave Palestine.”
The messages, cyber security experts say, are the most visible end of a vast war being waged in the far reaches of the Internet between Iran, Israel, and the US and their online sympathizers.
They may use keyboards instead of rifles, but Iran’s hackers, who have fought Israel in the digital shadows for years, are among the most battle-hardened soldiers Tehran can call on.
“The Iranians are throwing everything they have at this,” said Chris Krebs, who as a former director of the Cybersecurity and Information Security Agency (CISA) was one of the most senior civilian US cyber security officials.
“It is all hands on deck,” Krebs said. “If their cyber operators are breathing, then they will be on their keyboards.”
Their aims vary wildly, from sowing fear to causing chaos, hoovering up intelligence and isolating missile targets. In the murky world of cyber warfare it is hard to tell who even has the upper hand.
But winning in cyber space has become so critical to shaping perceptions and damaging enemy morale that Iran has invested heavily in efforts to pierce American and Israeli firewalls.
Iran has three different levels of cyber operators, whose boundaries are often blurry, analysts and former officials said.
The most experienced are run directly by the Islamic Revolutionary Guard Corps and Iran’s Ministry of Intelligence. They maintain a dizzying array of front organizations, used to introduce plausible deniability for attacks and issue public threats.
Facts Only
Actors: Iranian hackers, Islamic Revolutionary Guard Corps, Ministry of Intelligence, Israel, US
Actions/Events: cyber attacks, sowing fear, causing chaos, gathering intelligence, isolating missile targets
Timeline: ongoing, with recent escalations during the conflict between Israel and Iran
Locations: Internet, far reaches of the Internet
Institutions: various front organizations used by Iranian hackers for plausible deniability
Executive Summary
Full Take
In this digital battlefield, Iran's cyber operators have emerged as formidable adversaries for Israel and the US. The complexity of the conflict involves a mix of state-sponsored actors, front organizations, and manipulative tactics designed to exploit fears, create confusion, and gather intelligence. As we navigate through these cyber wars, it is crucial to maintain a principled skepticism and recognize the diverse perspectives involved, while also considering the broader implications for human agency and dignity in the digital age.
Patterns detected: ARC-0024 Ambiguity (the nature of Iran's cyber operators and their relationship with various institutions is blurry), ARC-0039 Emotional Exploitation (the use of fear appeals and moral panic to manipulate public opinion)
Root Cause: The ongoing geopolitical tension between Iran, Israel, and the US has escalated into a multi-dimensional conflict that includes cyber warfare.
Implications: As technology continues to evolve, so too does the potential for exploitation in this digital realm. This conflict highlights the importance of safeguarding personal data, maintaining robust cyber security measures, and promoting transparency in the face of information manipulation efforts.
Bridge Questions: How can we better protect our digital identities from state-sponsored hackers? What role should international cooperation play in preventing and responding to cyber attacks? What measures can be taken to promote transparency in the realm of cyber warfare?