As Iranian missiles hit Israel, some Android users received text messages promising real-time updates on nearby bomb shelters. But instead of helpful information, the links installed spyware, giving hackers access to cameras, location data, and personal information.
The attack, linked to Iran, shows how cyber operations are now a key part of modern warfare. Experts say Tehran and its allied groups are using digital tactics to make up for military disadvantages, combining hacking, disinformation, and artificial intelligence.
Gil Messing, chief of staff at cybersecurity firm Check Point Research, said the texts were timed to coincide with missile strikes, creating a “digital-physical” attack. “This was sent to people while they were running to shelters,” he said. “The exact timing is unprecedented.”
Even if a ceasefire is reached, cyberattacks are expected to continue because they are cheap, fast, and focus on spying, theft, and intimidation rather than outright destruction.
High-volume, low-impact attacks
Most attacks so far have caused little direct damage but forced U.S. and Israeli companies to patch security weaknesses. DigiCert, a Utah-based cybersecurity firm, has tracked nearly 5,800 attacks by about 50 Iran-linked groups targeting networks in the U.S., Israel, and Gulf countries. Many attacks aim to intimidate rather than inflict major damage.
Recently, a pro-Iranian group claimed responsibility for breaching an account of FBI Director Kash Patel, posting old personal documents. Such attacks are often designed to boost supporters’ morale and unsettle opponents.
Hospitals and data centers under threat
Iran is likely to target weak points in U.S. infrastructure, including hospitals, supply chains, and critical data centers. Recent strikes included Michigan-based medical company Stryker and another unnamed healthcare firm, hit with ransomware that aimed to disrupt rather than demand money.
Cynthia Kaiser of Halcyon said, “There is a deliberate focus on the medical sector, and targeting is expected to increase.”
AI’s role in cyber warfare
Artificial intelligence is speeding up attacks and spreading false information, including deepfakes. One fake image of sunken U.S. warships received over 100 million views. Iranian authorities also control internet access to shape domestic perceptions of the war, sometimes labeling real footage as fake.
In response, the U.S. created a Bureau of Emerging Threats last year to counter risks from new technologies. AI also helps defenders respond faster, according to Director of National Intelligence Tulsi Gabbard.
While Russia and China remain the largest cyber threats, Iran has shown it can target American systems, including political campaigns, water plants, military networks, and online movements opposing Israel.