Global cyber alert: Iranian hackers strike U.S. banks, defence and oil firms

Tehran-aligned and pro-Palestinian hacker collectives launch coordinated DDoS strikes on United States, exposing critical digital vulnerabilities as the fragile ceasefire teeters

Washington: Hackers aligned with Tehran have struck more than a dozen U.S. banks, defense contractors and oil companies with denial-of-service attacks following recent American strikes on Iranian nuclear facilities though no widespread disruptions to critical infrastructure or the wider economy have been reported yet. Security analysts warn the threat could escalate if the Iran–Israel ceasefire collapses or if independent hacker groups supporting Iran follow through on promises of a digital campaign against the United States.

Experts say the current lull could end swiftly. “We just showed the world: You don’t want to mess with us kinetically. But we are wide open digitally. We are like Swiss cheese,” said Arnie Bellini, CEO of Bellini Capital, noting that hacking operations cost far less than bullets or bombs and exploit America’s reliance on digital technology. He warned that U.S. strikes might prompt Iran, Russia, China and North Korea to ramp up investments in cyberwarfare.

---

Two pro-Palestinian hacking collectives, including one calling itself Mysterious Team, posted on Telegram that they had disrupted the websites and networks of aviation firms, banks and oil companies. “We increase attacks from today,” the group declared, urging other hackers to join the effort, according to researchers at the SITE Intelligence Group.

The Department of Homeland Security issued a public bulletin warning of heightened Iranian cyberthreats, while the Cybersecurity and Infrastructure Security Agency urged operators of water systems, pipelines and power plants to bolster defenses. Although Iran lacks the sophisticated offensive capabilities of China or Russia, it has a long history as a “chaos agent,” using cyberattacks to steal secrets, score political points or sow fear.

Even if Tehran’s government halts retaliatory hacks to avoid further confrontation, loosely affiliated or entirely independent groups, more than 60 of which have been tracked by Trustwave could carry on. Such actors can inflict economic damage and psychological shock; after Hamas’s October 7, 2023 assault on Israel, hackers breached an emergency-alert app and falsely warned users of an incoming nuclear strike, a tactic that “causes an immediate psychological impact,” said Ziv Mador, vice president of security research at Trustwave’s SpiderLabs.

Beyond disruption, Iran is almost certain to persist in cyber-espionage aimed at foreign leaders. Last year, U.S. authorities charged three Iranian operatives with hacking attempts against former President Trump’s campaign. “These limited resources are being used for intelligence collection to understand what Israel or the U.S. might be planning next, rather than performing destructive attacks,” said Jake Williams, former NSA cybersecurity expert and now vice president of R&D at Hunter Strategy.

Calls to strengthen America’s digital defenses come as the Trump administration has slashed funding and staffing for key cybersecurity programs. CISA has placed election-security staff on leave and cut millions in state and local grants. The CIA and NSA have also seen reductions, and Gen. Timothy Haugh, formerly in charge of NSA and Cyber Command was abruptly dismissed.

The Israel-Iran conflict underscores the need for robust cyberoffense and defense. Mador points out that Israel’s own strikes on Iranian nuclear scientists relied on sophisticated cyberespionage. To keep pace, Bellini recently pledged $40 million for a new cybersecurity center at the University of South Florida, stressing that investments in education and technical safeguards are critical to securing connected devices and networks.

“There is a new arms race when it comes to cyberwar, and it’s a contest America can’t afford to lose,” Bellini said. “It’s Wile E. Coyote vs. the Road Runner. It will go back and forth, and it will never end.”