US-Israeli military attacks on Iran have caused a lull in cyberactivity, but Iranian groups will turn to destructive wiper attacks at some point, experts warn.

CSO Online offers insights into cybersecurity, risk management, and IT leadership, providing articles, reports, and expert analysis to help security professionals navigate the evolving threat landscape and protect their organizations from cyber attacks. By exploring CSO Online's curated content, CISOs, security managers, and IT executives can learn about threat intelligence, security frameworks, and incident response strategies for building resilient cybersecurity programs. Whether you're defending against ransomware, phishing attacks, or insider threats, CSO Online offers resources to strengthen your security posture and safeguard your digital assets.

CSO Online

Despite US-Israeli military strikes on Iran, expected Iranian cyber-retaliation has been surprisingly limited so far. Security agencies in the UK, Canada, and the US have issued warnings about heightened risk. The main concerns are destructive wiper malware attacks (Iran has 15+ wiper families including ZeroCleare and Meteor), APT groups like Charming Kitten and OilRig going quiet (possibly pre-positioning), and DDoS activity from hacktivist proxies. Most at-risk sectors include critical infrastructure, energy, healthcare, and financial services. Experts recommend phishing-resistant MFA, patching VPN/edge devices, and monitoring for Shamoon variants. AI is flagged as a growing multiplier that could enable less-skilled actors to conduct major cyberattacks.

Iranian cyberattacks fail to materialize but threat remains acute