Iran to widen cyber attacks after air strikes, says Google GTIG

According to Google Threat Intelligence Group (GTIG), John Hultquist warned that Iran will “absolutely” respond to the US and Israeli air strikes with cyber-attacks against a wide range of targets in the Middle East and beyond, following the escalation of the conflict. The remarks were made at an event in London hosted by the Royal United Services Institute (RUSI).

Hultquist said there would be a shift in attack surface globally, with targeting expanding beyond highly mature states to a broader set of potential victims. He also described blurred lines between Iranian state actors and hacktivist or criminal groups, noting that fronts for the Iranian Revolutionary Guard Corps (IRGC) could be involved in attacks and ransomware activity.

Following the regional conflict escalation, The National Cyber Security Centre (NCSC) has urged organisations to review their cybersecurity posture, particularly if they operate in or have supply chains connected to the Middle East.