Updates
Update April 17, 2026
As of April 17, 2026, Iran has begun restoring limited access to the internet after disconnecting from it for the past 47 days. Iran is limiting domestic access to only websites and applications mirrored on its National Information Network.
Iranian Threat Groups Renew Interest in Critical Infrastructure
In late March 2026, Unit 42 discovered a new cluster of threat ac...
The strongest version of this narrative highlights the escalation of cyber warfare as an extension of geopolitical conflict, with verifiable evidence of state-aligned and hacktivist operations targeting critical infrastructure. The report credibly documents the shift in Iranian cyber tactics, the adaptation to internet restrictions via VSAT, and the proliferation of financially motivated scams leveraging regional trust. It also effectively maps the involvement of multiple threat actors, from pro...