Alongside the recent military confrontation involving the United States, Israel, and Iran, a parallel conflict has been unfolding in cyberspace. Israeli officials claim that cyberattacks linked to Iran have increased sharply over the past year, with thousands of incidents reported in June 2026 alone.
According to Yossi Karadi, Director General of Israel's National Cyber Directorate, the number of cyber incidents attributed to Iran rose significantly following the US-Israeli military campaign against Iran. Speaking to the German newspaper Die Welt, Karadi said Israeli authorities recorded approximately 1,600 hostile cyber incidents during military operations against Iran in June 2025. By June 2026, that figure had reportedly climbed to around 4,800 incidents.
Karadi warned that some of the groups involved possess advanced capabilities and should not be underestimated. He noted that while Israel has been able to manage the threat so far, cyber warfare differs from conventional warfare because it continues regardless of ceasefires or diplomatic agreements.
The alleged attacks have targeted a broad range of entities, including critical infrastructure, major institutions, small and medium-sized businesses, and individual citizens. Karadi specifically mentioned law firms and accounting firms among the organisations that had been targeted. Despite the increase in attacks, he said Israel has so far succeeded in preventing major disruptions to critical infrastructure systems.
Iran has generally denied conducting cyber operations against foreign countries, while simultaneously reporting that it has itself been the target of cyberattacks.
Artificial intelligence is also reportedly playing an increasing role in modern cyber operations. According to a previous report by the Financial Times, Iranian-linked hackers have allegedly used AI tools such as ChatGPT, Gemini, and other Western AI platforms to create malware, draft phishing messages in Hebrew and Arabic, and generate realistic fake online identities aimed at targets in Israel and the United States.
The report suggests that these AI-generated personas are used to establish trust with potential victims through prolonged online interactions. Once trust is built, attackers may attempt to lure targets into clicking malicious links or sharing sensitive information.
Israeli authorities have also reportedly faced waves of phishing emails and text messages, some of which allegedly encouraged recipients to cooperate with Iranian intelligence services.
Beyond cyberattacks, Iran has also been accused of conducting online influence operations. Previous reports have alleged the use of platforms such as YouTube to distribute propaganda content, including animated videos directed at US President Donald Trump and broader American audiences.
The reported surge in cyber activity highlights how modern conflicts increasingly extend beyond traditional battlefields, with governments, businesses, and individuals becoming targets in a continuous digital struggle that operates alongside military and political confrontations.
