Amid the escalating tensions and military confrontations during the June 13-24 war between Iran and Israel, the cyber warfare dimension, particularly Iran's actions, garnered relatively little attention. However, this overlooked aspect revealed a significant shift in Iran's strategic approach to cyber operations, demonstrating its intention to integrate digital tools into a broader hybrid warfare strategy. Despite lacking advanced technical capabilities, Iran has refined its cyber responses, focusing on coordination and coherence across various domains of warfare.
Throughout the 12-day conflict, Iranian cyber actors executed a comprehensive range of operations that extended well beyond simple hacking incidents. Their digital initiatives aimed to exert psychological pressure, gather tactical intelligence, and maintain domestic control while simultaneously deterring third-party support for Israel. This reflects a concerted effort to meld conventional military tactics with unconventional cyber capabilities, thus enhancing Iran's overall hybrid strategy.
One of the most prominent features of Iran's cyber response was its rapid deployment of disruptive operations in retaliation for U.S. strikes on Iranian nuclear facilities.
In addition to disruptive tactics, Iran intensified its psychological operations alongside these cyber activities. Utilizing artificial intelligence, Iranian operatives generated and disseminated disinformation to pollute the online information landscape with misleading content. This included impersonating Israeli citizens on social media, spreading defeatist sentiments in Hebrew to undermine morale. While the scope and engagement of these campaigns appeared limited, they indicated a strategic shift towards leveraging emerging technologies for influence.
Iran also conducted tactical intelligence operations using cyber-enabled reconnaissance. Notably, Iranian hackers exploited Israeli internet-connected closed-circuit television (CCTV) systems, aiming to gather real-time intelligence to enhance situational awareness and adjust missile target assessments. This tactic illustrated a more advanced approach to cyber espionage, enabling Iranian units to extend their reconnaissance capabilities deep into adversary territory without relying on traditional intelligence resources.
Additionally, Tehran employed its cyber arsenal to exert pressure on countries perceived as supporting Iranian dissidents or aligning with adversaries. For instance, Iranian cyber intrusions targeted Albanian government systems in retaliation for Albania's hosting of the Mujahedin-e-Khalq Organization(MKO), an exiled Iranian opposition group. While this operation was not destructive, it communicated a clear message: Iran could retaliate against nations perceived as threats.
Simultaneously, Iran intensified its digital repression at home, instituting internet blackouts under the guise of ensuring network stability. This domestically imposed control over information flows not only served to censor dissent but was part of a broader strategy to maintain stability during times of external conflict. By controlling access to information during active military engagements, Tehran effectively obscured the situation from both domestic citizens and international observers, emphasizing the importance of internal information control in parallel with external influence operations.
The actions taken by Iran during the war illuminate its evolving strategies in the cyber sphere. While the technical capability may still be lacking, the strategic intent to integrate cyber operations into broader military and statecraft practices is evident. Iran's approach represents an evolving understanding of hybrid warfare, where digital capabilities are increasingly treated as essential tools in the pursuit of national objectives.
In summary, the June 2025 conflict underscored a significant transformation in Iran's cyber capabilities, where digital operations became integral to its hybrid warfare model. By blending conventional and unconventional tools, Iran has adapted to the complex geopolitical landscape, leveraging cyber capabilities to shape narratives, exert influence, and bolster domestic control. Moving forward, the implications of such strategies will likely resonate beyond this conflict, as cyber warfare remains a pivotal component in global power dynamics.
Hossein Amiri - ahmad shirzadian
