Threats & Adversaries · DDoS

Iran-Linked Cyberattacks Surge After US‑Israel Operation Epic Fury

Iran-aligned and pro-West hacking groups have escalated offensive cyber operations after the US‑Israeli Operation Epic Fury. Targeting includes DDoS, wiper-style intrusions, app hijacks and disruptions to government, military and critical infrastructure. Vendors report reconnaissance and DDoS activity already underway and warn less-hardened Gulf states and supply chains face heightened risk.

18 sources · Mar 24

Timeline

• Mar 24 Reported by The Record from Recorded Future
• Mar 24 Reported by Cybersecurity Dive
• Mar 19 Reported by CyberScoop
• Mar 18 Reported by Tenable
• Mar 16 Reported by Unit 42
• Mar 13 Reported by ESET Research
• Mar 12 Reported by Dark Reading
• Mar 11 Reported by Rapid7
• Mar 10 Reported by Check Point Research
• Mar 6 Reported by Infosecurity Magazine
• Mar 5 Reported by Schneier on Security
• Mar 3 Reported by TechCrunch Security

Sources

• Mar 24 The Record from Recorded Future

  Iran-linked ransomware gang targeted US healthcare org amid military conflict

  The incident responders noted that there was no evidence that data was exfiltrated during the intrusion — an unusual development considering U.S. intelligence agencies previously said Pay2Key attacks were largely conducted for information theft.

  original

• Mar 24 Ars Technica Security

  Self-propagating malware poisons open source software and wipes Iran-based machines

  Development houses: It's time to check your networks for infections.

  original

• Mar 24 SecurityWeek

  Stryker Says Malicious File Found During Probe Into Iran-Linked Attack

  The FBI has published an alert describing the malware used by Iranian government hackers.

  original

Part of the PlainSec briefing for 2026-03-03

Every edition of this story: Iran-Linked Cyberattacks Surge After US‑Israel Operation Epic Fury

More from today

• US‑Israeli Strikes Coincide With Major Cyber Disruption in Iran