What is APT33 and what has it targeted?

APT33 is an Iranian state-sponsored hacking group linked to the IRGC that has targeted aerospace, energy, and petrochemical companies in the US, Saudi Arabia, and South Korea, primarily using spear-phishing and destructive malware.

Has Iran attacked US infrastructure?

Yes. Iranian cyber actors have targeted US financial institutions with DDoS attacks, attempted to access water treatment facilities, and conducted reconnaissance against energy grid control systems, though no major destructive attack on US critical infrastructure has been confirmed.

How does Iran use cyber operations in the current conflict?

Iran uses cyber operations as a below-the-threshold tool to harass adversaries, gather intelligence, and signal capability without triggering a conventional military response. Current operations focus on Israeli infrastructure, Gulf state energy systems, and US defense contractors.

Loading…

Iran's Cyber Capabilities

Iran has built one of the most capable offensive cyber programs in the Middle East over the past decade, operating through units linked to the IRGC and Ministry of Intelligence. Iranian cyber actors have conducted destructive attacks on Saudi Aramco, targeted US financial institutions, and attempted to infiltrate water and energy infrastructure across the Gulf region and Israel.