Iran-Israel cyberwar grows as military tensions mount

While the military standoff between Iran and Israel has gained significant attention, less focus has been placed on the growing conflict between the two nations in the digital realm.
The frequency of cyberattacks exchanged between Iran and Israel has surged dramatically as military tensions have intensified. Gaby Portnoy, the director general of the Israel National Cyber Directorate, revealed at the Cybertech Global Conference in Tel Aviv in April that the intensity of cyberattacks had tripled since the beginning of the current Gaza conflict. He also pointed out that the hacker group known as Black Shadow, which operates under the facade of a private enterprise in Tehran but is reportedly linked to the Iranian Ministry of Intelligence, has been particularly active in these attacks.
One cyberattack late last year targeted Safed’s Ziv Medical Center. Hackers managed to infiltrate the hospital’s systems and access sensitive patient data, which was subsequently leaked online. The Israel National Cyber Directorate attributed this attack to Iran and Hezbollah. Additionally, a malicious email allegedly containing “citizen safety” guidelines from the Israel Defense Forces was sent to Israeli citizens on Aug. 4, demonstrating the sophisticated attempts of Iranian cyber attackers.
Another of the known Iranian hacking groups is MuddyWater, which is famous for its strategic online espionage operations. MuddyWater is affiliated with the Iranian government and has been involved in numerous sophisticated cyberattacks, targeting various entities across the globe. Its strategy often involves infiltrating systems to gather intelligence and disrupt operations, making it a significant player in Iran’s cyberwarfare arsenal.
Iran has also been the target of substantial cyberattacks. One notable incident involved a major attack on Iran’s largest bank, resulting in the theft of account holders’ information. In another attack, Iran’s fuel infrastructure was severely disrupted, with Tehran blaming Israel for the breach.
Cyberattacks pose a severe threat to almost every sector, from healthcare and banking to tourism and transportation. The damage inflicted by such attacks can be profound, paralyzing essential services, releasing sensitive information and causing widespread panic. For instance, in the healthcare industry, a cyberattack could lead to the exposure of patients’ private medical records, the disruption of hospital operations and even the endangering of lives.
In the financial sector, breaches can lead to the theft of massive amounts of money, identity fraud and a loss of public trust in the banking system. Cyberattacks on transport systems can cripple logistics, delay critical supplies and cause chaos. The tourism industry can also be severely impacted, with attacks leading to the leaking of personal data and disruptions to travel. The cumulative effect of such widespread attacks can destabilize a nation, causing long-term economic damage as well as eroding public confidence.

Cyberattacks pose a severe threat to almost every sector, from healthcare and banking to tourism and transportation.

Dr. Majid Rafizadeh

It is important to point out that the cyber conflict between Iran and Israel is not a new phenomenon; it has roots that stretch back nearly two decades. The conflict in cyberspace began in the early 2000s, when both Iran and Israel recognized that such capabilities could give them an edge.
One of the earliest and most significant events was the Stuxnet attack of 2010. Stuxnet, a sophisticated computer worm, was reportedly developed by the US and Israel to target Iran’s nuclear facilities, specifically the centrifuges at the Natanz uranium enrichment plant. The attack set Iran’s nuclear program back by several years, demonstrating the power of cyber weaponry. Following this event, the Iranian government began to invest heavily in its cyber capabilities, leading to a series of retaliatory attacks on Israeli infrastructure, banks and critical systems. Over the years, the two nations have engaged in tit-for-tat attacks, each trying to outmaneuver the other with ever more sophisticated and damaging cyberattacks.
Israel and Iran’s preference for cyberwarfare over direct military confrontation can be attributed to several factors. First of all, cyberwarfare is significantly less costly than traditional military operations. The financial and human costs associated with deploying troops, maintaining equipment and engaging in prolonged battles are far greater than those involved in conducting cyberattacks. Cyber operations can be carried out by small, skilled teams using relatively inexpensive tools, making them an attractive option.
Secondly, cyberwarfare offers a level of deniability that conventional military actions do not have. When a cyberattack is launched, it can be challenging to immediately attribute it to a specific nation or group. This ambiguity allows states to engage in aggressive actions without triggering a full-scale military response. For example, Iran can deny involvement in a cyberattack on Israel, instead attributing it to independent hackers or rogue groups, thereby avoiding a direct confrontation while still causing damage.
Finally, cyberwarfare has the ability to target specific systems and sectors with precision, causing maximum disruption with minimal collateral damage. Unlike traditional warfare, which often results in widespread destruction and civilian casualties, cyberattacks can be tailored to disrupt critical infrastructure, steal sensitive information or sabotage military operations without physical violence. This precision makes cyberwarfare a preferred tool for nations seeking to weaken their enemies without engaging in open conflict.
In conclusion, as military tensions between Iran and Israel continue to rise, the cyber front has emerged as an equally intense battleground, if not even more so. The correlation between escalating military conflicts and an increase in cyberattacks suggests that this digital warfare will likely intensify in parallel with traditional confrontations.

• Dr. Majid Rafizadeh is a Harvard-educated Iranian American political scientist. X: @Dr_Rafizadeh