The Iranian Cyber Threat | INSS
go to header go to content go to footer go to search
INSS logo The Institute for National Security Studies, Strategic, Innovative, Policy-Oriented Research, go to the home page
INSS
Tel Aviv University logo - beyond an external website, opens on a new page
  • Campus
  • Contact
  • עברית
  • Support Us
  • Research
    • Topics
      • Israel and the Global Powers
        • Israel-United States Relations
        • Glazer Israel-China Policy Center
        • Russia
        • Europe
      • Iran and the Shi'ite Axis
        • Iran
        • The Israel–Iran War
        • Lebanon and Hezbollah
        • Syria
        • Yemen and the Houthi Movement
        • Iraq and the Iraqi Shiite Militias
      • Conflict to Agreements
        • Israeli-Palestinian Relations
        • Hamas and the Gaza Strip
        • Peace Agreements and Normalization in the Middle East
        • Saudi Arabia and the Gulf States
        • Turkey
        • Egypt
        • Jordan
      • Israel’s National Security Policy
        • Military and Strategic Affairs
        • Societal Resilience and the Israeli Society
        • Jewish-Arab Relations in Israel
        • Climate, Infrastructure and Energy
        • Terrorism and Low Intensity Conflict
      • Cross-Arena Research
        • Data Analytics Center
        • Law and National Security
        • Advanced Technologies and National Security
        • Cognitive Warfare
        • Economics and National Security
    • Projects
      • Preventing the Slide into a One-State Reality
      • Contemporary Antisemitism in the United States
      • Perceptions about Jews and Israel in the Arab-Muslim World and Their Impact on the West
  • Publications
    • -
      • All Publications
      • INSS Insight
      • Policy Papers
      • Special Publication
      • Strategic Assessment
      • Technology Platform
      • Memoranda
      • Posts
      • Books
      • Archive
  • Database
    • Surveys
    • Spotlight
    • Maps
    • Dashboards
  • Events
  • Team
  • About
    • Vision and Mission
    • History
    • Research Disciplines
    • Chairman of the Board
    • Board of Directors
    • Fellowship and Prizes
    • Internships
  • Media
    • Communications
    • Video gallery
    • Press Releases
  • Podcast
  • Newsletter
  • Campus
Search in site
  • Research
    • Topics
    • Israel and the Global Powers
    • Israel-United States Relations
    • Glazer Israel-China Policy Center
    • Russia
    • Europe
    • Iran and the Shi'ite Axis
    • Iran
    • The Israel–Iran War
    • Lebanon and Hezbollah
    • Syria
    • Yemen and the Houthi Movement
    • Iraq and the Iraqi Shiite Militias
    • Conflict to Agreements
    • Israeli-Palestinian Relations
    • Hamas and the Gaza Strip
    • Peace Agreements and Normalization in the Middle East
    • Saudi Arabia and the Gulf States
    • Turkey
    • Egypt
    • Jordan
    • Israel’s National Security Policy
    • Military and Strategic Affairs
    • Societal Resilience and the Israeli Society
    • Jewish-Arab Relations in Israel
    • Climate, Infrastructure and Energy
    • Terrorism and Low Intensity Conflict
    • Cross-Arena Research
    • Data Analytics Center
    • Law and National Security
    • Advanced Technologies and National Security
    • Cognitive Warfare
    • Economics and National Security
    • Projects
    • Preventing the Slide into a One-State Reality
    • Contemporary Antisemitism in the United States
    • Perceptions about Jews and Israel in the Arab-Muslim World and Their Impact on the West
  • Publications
    • All Publications
    • INSS Insight
    • Policy Papers
    • Special Publication
    • Strategic Assessment
    • Technology Platform
    • Memoranda
    • Posts
    • Books
    • Archive
  • Database
    • Surveys
    • Spotlight
    • Maps
    • Dashboards
  • Events
  • Team
  • About
    • Vision and Mission
    • History
    • Research Disciplines
    • Chairman of the Board
    • Board of Directors
    • Fellowship and Prizes
    • Internships
    • Privacy Policy and Terms of Use
  • Media
    • Communications
    • Video gallery
    • Press Releases
  • Podcast
  • Newsletter
  • Campus
  • Contact
  • עברית
  • Support Us
bool(false)

Publications

Home Publications Memoranda The Iranian Cyber Threat

The Iranian Cyber Threat

Memorandum 230, February 2024

עברית
Chuck Freilich

Iran was one of the first states to formulate a national cyber strategy, including development of the necessary state institutions and technological capabilities. Today, Iran is one of the more active states in the cyber realm, near the top of the second tier of global actors. Iran’s cyber attacks have demonstrated the potential to disrupt, sabotage and even destroy civil and commercial targets, critical national infrastructure and military capabilities, and its cyber espionage and information operations have been particularly extensive. Israel and the United States are Iran’s primary targets.


This study presents a comprehensive and up-to-date analysis of Iran’s cyber strategy, institutions and praxis. Its five parts present: a brief background on the cyber threat and what makes it different from other realms of conflict; Iran’s cyber strategy and the institutions and capabilities it has developed; the primary cyber attacks Iran has conducted against the US and actors in the Middle East and around the world; the Iranian cyber threat to Israel; and an assessment of the actual impact of Iran’s attacks to date, along with conclusions and policy recommendations.


Click here to download the full Memorandum

Table of Contents:

Iran was one of the first states to formulate a coherent national cyber strategy,including the establishment of the necessary state institutions and development of the requisite technological capabilities. Its interest in the cyber realm was first sparked by two primary developments: first, the effective use that the opposition made of the internet to foment and sustain the mass demonstrations following the rigged presidential elections in 2009, and second, the dramatic Stuxnet attack against Iran’s nuclear program in 2010, reportedly a joint US–Israeli operation. Ever since, Iran’s cyber capabilities have grown steadily, and it is now commonly ranked at the top of the second tier of global cyber powers...
Read more

The Iranian cyber threat is just one facet of the astonishing information revolution that has swept the world in recent decades. In just two days, the international community creates as much data as it did from the beginning of time up until 2003. In 2019 nearly half the homes around the world had a computer. In 2021 there were some 15 billion mobile phones, and more than 26 billion devices were connected to the internet in 2022.1 Each computer and phone presents a technological and societal advance but also a potential portal for malicious cyber activity. The artificial intelligence (AI) revolution is just beginning...
Read more

In the early 2010s, two primary factors led Iran to rapidly develop its heretofore limited cyber capabilities. The first was the effective use of the internet by the Iranian opposition to foment and sustain the mass demonstrations following the rigged presidential elections in 2009. The regime ultimately succeeded in suppressing the protests but also gained a healthy appreciation of the threat that the new technology posed to its stature and stability.21 The second factor was the dramatic Stuxnet attack against Iran’s nuclear program in 2010, reportedly a joint US–Israeli cyber sabotage operation. Stuxnet, the first known case of a cyberattack that caused physical damage, demonstrated Iran’s extreme vulnerability and led to a severe national shock. In response, Iran rapidly accelerated the development of its then only nascent cyber capabilities...
Read more

The following section presents the major attacks that Iran has conducted to date against states around the world, while attacks against Israel are presented in the next section...
Read more

Israel is Iran’s primary adversary in the cyber realm, as it is in all others. Before turning to the Iranian cyber threat to Israel, it is important that we begin by placing them in the broader strategic context of the overall threat that Iran poses to Israel. For decades, the Supreme Leader Khamenei and other Iranian leaders have repeatedly called for Israel’s destruction, referring to it, inter alia, as a “cancerous tumor” that must be removed. In 2014 Khamenei even publicly enunciated a nine-point plan for Israel’s destruction.
Read more

Iran’s cyber capabilities have advanced considerably since the anti-regime demonstrations in 2009 and the Stuxnet attack in 2010 first sparked its interest in the cyber realm. In the past decade, Iran has become one of the more active states in cyberwarfare, probably at, or near, the top of the second tier of global actors. The number of attacks that Iran has launched and their sophistication have grown, and it has demonstrated the potential to destroy, disrupt, distort, sabotage, or undermine critical national infrastructure, commercial interests, military capabilities, domestic politics, societal resilience, and international diplomacy. Iran’s capabilities will likely continue to improve, as a result of its own indigenous capabilities and due to Russian and Chinese assistance.
Read more

The opinions expressed in INSS publications are the authors’ alone.
Publication Series Memoranda
TopicsIranIran: The International Arena
עברית

Events

All events
Israel–U.S. Relations: An Alliance in Transition?
22 December, 2025
13:00 - 16:00

Related Publications

All publications
The Second “Imposed War”: The Israel–Iran War and Its Implications for Iran’s National Security
The 12-day war between Iran and Israel in June 2025 marked the sharpest escalation to date in the ongoing confrontation between the two states. Despite its relatively short duration, the war had a destabilizing effect on the Islamic Republic due to the success of Israel’s opening strike, the decision of the United States to join the campaign, and the damage sustained by Iran’s critical strategic systems—notably its nuclear program and long-range missile arsenal. Since the end of the war, Iran has engaged in an ongoing process of drawing lessons from the serious gaps revealed in the Islamic Republic’s deterrence and defense capabilities. The Iranian leadership is certainly aware of the need for improvements and adjustments to its national security doctrine; yet for now, this does not appear sufficient to produce a fundamental shift in Iranian strategy. It seems that Iran prefers to make adjustments within the existing framework by finding acceptable solutions to the gaps exposed rather than introducing major changes to its overall strategy. In any event, the new reality in Iran created by the war is characterized by instability, and it is doubtful whether the current status quo can endure for long. This is exacerbated by the growing possibility of a miscalculation between Iran and Israel that would lead to renewed clashes, or high-risk decisions by Iran on both the nuclear issue and on the regional front. This memorandum seeks to examine the lessons that Iran is drawing from the war and its implications in four main areas: the nuclear program, strategic military systems, the regional arena, and the domestic arena—and to assess how the war has influenced Iran’s national security concept. In addition, it includes a set of policy recommendations intended to block, or at least delay, Iran’s efforts to rebuild its strategic capabilities, foremost among them the nuclear program, and the pro-Iranian axis in the region, and to reduce as much as possible the risk of renewed fighting.
20/12/25
Aircraft Under the Radar: Mechanisms of Evading Sanctions in Iran’s Aviation Sector
Despite being subjected to one of the harshest sanctions regimes in the world, Iran has succeeded in building a sophisticated, law-evading mechanism to support its aviation industry, which reflects the broader principles of the shadow economy it has developed. This article maps the operational architecture of that mechanism, based on using front and shell companies in countries with little transparency, layered ownership registries, bursts of activity designed to complete transfers within short timeframes, and flight-path planning that includes fictitious emergency landings to allow aircraft to quietly enter Iran. The article describes how Iran’s aviation sector—significantly harmed by sanctions—has shifted from a civilian transportation tool to a core component of the regime’s economic and security strategy, enabling it to continue functioning, finance its regional proxies, and project resilience in the face of international pressure. The aviation industry represents only one link in a much larger apparatus designed to evade sanctions in the trade of oil, gold, and dual-use technologies; yet the aviation sector clearly demonstrates the method: a sophisticated integration of state, market, and underground networks that operate in regulatory gray zones and disrupt efforts to globally enforce the sanctions.
17/12/25
Iranian Supreme Leader'S Office via ZUMA Press Wire
The Deadlock Surrounding Iran’s Nuclear Program
The solution to the crisis surrounding the Iranian nuclear program is nowhere in sight, and the ticking clock is forcing Tehran to make fateful decisions
09/12/25

Stay up to date

Registration was successful! Thanks.
  • Research

    • Topics
      • Israel and the Global Powers
      • Israel-United States Relations
      • Glazer Israel-China Policy Center
      • Russia
      • Europe
      • Iran and the Shi'ite Axis
      • Iran
      • The Israel–Iran War
      • Lebanon and Hezbollah
      • Syria
      • Yemen and the Houthi Movement
      • Iraq and the Iraqi Shiite Militias
      • Conflict to Agreements
      • Israeli-Palestinian Relations
      • Hamas and the Gaza Strip
      • Peace Agreements and Normalization in the Middle East
      • Saudi Arabia and the Gulf States
      • Turkey
      • Egypt
      • Jordan
      • Israel’s National Security Policy
      • Military and Strategic Affairs
      • Societal Resilience and the Israeli Society
      • Jewish-Arab Relations in Israel
      • Climate, Infrastructure and Energy
      • Terrorism and Low Intensity Conflict
      • Cross-Arena Research
      • Data Analytics Center
      • Law and National Security
      • Advanced Technologies and National Security
      • Cognitive Warfare
      • Economics and National Security
    • Projects
      • Preventing the Slide into a One-State Reality
      • Contemporary Antisemitism in the United States
      • Perceptions about Jews and Israel in the Arab-Muslim World and Their Impact on the West
  • Publications

    • All Publications
    • INSS Insight
    • Policy Papers
    • Special Publication
    • Strategic Assessment
    • Technology Platform
    • Memoranda
    • Database
    • Posts
    • Books
    • Archive
  • About

    • Vision and Mission
    • History
    • Research Disciplines
    • Chairman of the Board
    • Board of Directors
    • Fellowship and Prizes
    • Internships
    • Support
    • Privacy Policy and Terms of Use
  • Media

    • Communications
    • Video Gallery
    • Press Release
    • Podcast
  • Home

  • Events

  • Database

  • Team

  • Contact

  • Newsletter

  • עברית

INSS logo The Institute for National Security Studies, Strategic, Innovative, Policy-Oriented Research, go to the home page
40 Haim Levanon St. Tel Aviv, 6997556 Israel | Tel: 03-640-0400 | Fax: 03-744-7590 | Email: info@inss.org.il
Developed by Daat A Realcommerce company.
Accessibility Statement
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
No audio version available for this podcast