When War Goes Digital: Spyware and Cyberattacks in the Iran Conflict

0:00As Israelis rushed to escape an Iranian missile strike, some Android users received urgent text messages offering a link to real-time shelter information. Instead of help, the link installed spyware, giving attackers access to cameras, location data, and personal files. The incident, attributed to Iran, highlights a new level of coordination in modern conflict, blending cyber attacks with physical strikes. According to cybersecurity experts, the messages were tied to arrive exactly as missiles hit, marking a rare synchronization between digital and real-world operations. This tactic reflects a broader shift in warfare. Rather than relying solely on traditional military power, Iran and its allies are increasingly using cyber tools, disinformation, and artificial intelligence to offset their disadvantages. These methods are cheaper, harder to trace, and design less to destroy than to disrupt, spy, and intimidate. So far, many Iran-linked cyber attacks have been frequent, but relatively low in impact.

1:05Thousands of attacks by dozens of groups have targeted companies in the US, Israel, and across the Middle East. While most are easily blocked by updated security systems, they still force organizations to divert resources and patch vulnerabilities. Even unsuccessful attacks can have a psychological effect, especially on businesses connected to defense or critical infrastructure. Some operations are more about visibility than damage, such as hacking personal accounts and releasing old or limited data to create fear and undermine confidence. Experts describe this approach as, high volume low impact, cyber warfare, not devastating, but persistent and unsettling. It signals to distant targets that they remain within reach. At the same time, attackers are focusing on weaker points in national systems. Supply chains, healthcare providers, and infrastructure-like ports, rail networks, and water systems are all potential targets. Data centers have also become a priority,

2:09reflecting their growing importance in communication, commerce, and military operations. Recent incidents suggest a particular focus on the healthcare sector. In some cases, attackers deploy ransomware that locked organizations out of their own systems, without even demanding payment. This indicates motive centered on disruption and chaos rather than profit. Artificial intelligence is accelerating these trends. It allows hackers to automate attacks, increasing their speed and scale. But its most powerful impact may be in spreading disinformation. Fake images and videos, some generated with AI, have circulated widely, falsely depicting military victories or atrocities. Such content can reach millions, eroding public trust and blurring the line between reality and fabrication. Governments are responding by investing in defenses against these emerging threats. New initiatives aim to address the risks posed by AI and cyber warfare, while intelligence agencies are increasingly using the

3:12same technologies to detect and counter attacks. Despite being less advanced than countries like Russia or China in cyber capabilities, Iran has still carried out notable operations. These include attempts to infiltrate political campaigns, target infrastructure, and impersonate activists online to influence public opinion. Experts warn that even if physical fighting subsides, the cyber conflict is likely to continue. It is inexpensive, effective at creating disruption, and well suited to modern geopolitical competition, where influence and information can be as powerful as weapons.