THE report discusses the decentralized pro-Iran hacktivist ecosystem emerging in the context of U.S.-Iranian regional tensions. It highlights that this ecosystem comprises various loosely aligned groups, including jihadist cyber collectives and nationalist actors, using platforms like Telegram for coordination. The primary activities involve DDoS attacks, hack-and-leak operations, and propaganda, mainly targeting government and infrastructural entities.
Key groups within this ecosystem include 313 Team, Handala Hack Team, Cyber Fattah Team, and more, each emphasizing psychological warfare over technical sophistication. The report concludes that these actors can create significant disruption during geopolitical conflicts, necessitating organizations to be prepared for potential reputational risks and operational impacts.