Threats & Adversaries · DDoS

Iran Deploys Cyber Chaos Campaign to Pressure Rivals

Iran-aligned state and proxy actors have stepped up DDoS, data-wiping and deep intrusion operations after recent US-Israeli strikes. Claims include mass data destruction and attacks on government and healthcare systems. Security vendors warn reconnaissance and pre-positioned access raise risk of sustained disruption to energy and supply chains.

18 sources · Mar 24

Timeline

Mar 24 Reported by The Record from Recorded Future
Mar 24 Reported by Cybersecurity Dive
Mar 19 Reported by CyberScoop
Mar 17 Reported by Tenable
Mar 16 Reported by Unit 42
Mar 12 Reported by Dark Reading
Mar 11 Reported by Rapid7
Mar 10 Reported by Check Point Research
Mar 6 Reported by The Hacker News
Mar 5 Reported by Schneier on Security
Mar 3 Reported by TechCrunch Security

Sources

Mar 24 The Record from Recorded Future
Iran-linked ransomware gang targeted US healthcare org amid military conflict
The incident responders noted that there was no evidence that data was exfiltrated during the intrusion — an unusual development considering U.S. intelligence agencies previously said Pay2Key attacks were largely conducted for information theft.
original
Mar 24 Ars Technica Security
Self-propagating malware poisons open source software and wipes Iran-based machines
Development houses: It's time to check your networks for infections.
original
Mar 24 SecurityWeek
Stryker Says Malicious File Found During Probe Into Iran-Linked Attack
The FBI has published an alert describing the malware used by Iranian government hackers.
original

Part of the PlainSec briefing for 2026-03-22

Every edition of this story: Iran Deploys Cyber Chaos Campaign to Pressure Rivals