Threat Brief: Escalation of Cyber Risk Related to Iran (Updated June 30)
Summary: Unit 42 warned that Iran's military engagements with Israel and the U.S. heighten the risk of cyber spillover, though it had not yet seen a dramatic uptick in Iranian-directed attacks when it stopped updating the brief on Aug. 14, 2025. As of June 22, 2025, 120 hacktivist groups were reportedly active, with distributed denial-of-service the most-reported attack method, followed by destructive attacks including data wipers and a June 2025 crypto exchange breach that destroyed $90 million in funds.
What you should know: Unit 42 tracks Iran as one of four major nation-state actors alongside China, Russia and North Korea, and notes Iranian groups have a history of targeting critical infrastructure and sensitive industries globally - with reported targeting of operational technology tied to breaches of energy and utility companies.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026