A surge of coordinated cyberattacks struck Iran in the early hours of Saturday, as digital security experts and monitoring firms reported widespread intrusions targeting Iranian websites and applications. The incidents coincided with a series of military and diplomatic actions by the United States and Israel against the Islamic Republic.
Among the most notable breaches was the defacement of several Iranian news sites, which displayed unauthorized messages. The popular religious calendar app BadeSaba, with over 5 million downloads, was also compromised. Users of the app were greeted with messages such as “It’s time for reckoning,” along with calls for members of the armed forces to abandon their posts and join the people.
Reuters attempted to contact BadeSaba’s executive director but received no response. The US Cyber Command also did not reply to requests for comment.
In addition to the direct attacks, Iran experienced significant internet instability. Doug Madory, director of internet analysis at Kentik, shared data with Reuters showing a sharp drop in Iran’s online traffic, with connectivity levels falling to a minimum.
Hamid Kashfi, a security researcher and founder of DarkCell, said the targeting of the religious app was strategic, given its popularity among conservative and government-supporting users.
The Jerusalem Post and other outlets reported that digital operations had also hit Iranian government and military services, aiming to disrupt Tehran’s ability to coordinate a response. These claims have not yet been independently verified.
Escalation Likely
Experts warn the situation could worsen. Rafe Pilling, threat intelligence director at Sophos, said that as Iran considers its next moves, the likelihood of further actions by allied groups or hacktivists is rising. These could include targeting military, commercial, or civilian infrastructure linked to Israel and the United States, ranging from reusing old data leaks to less sophisticated attempts to breach exposed industrial systems.
Cynthia Kaiser, a former FBI cybersecurity executive now with Halcyon, noted a spike in digital activity in the region. She said known pro-Iran groups—active in data leaks, ransomware, and distributed denial-of-service (DDoS) attacks—are encouraging further operations.
Anomali, a cybersecurity firm, told Reuters that state-backed Iranian groups are reportedly using “wiper” attacks designed to erase data from Israeli systems, especially before or during larger offensives.
Analysts agree: the digital battlefield is poised to play a central role in the ongoing geopolitical escalation. As tensions mount, both sides appear to be preparing for a prolonged and increasingly virtual conflict.
Source: Olhar Digital
Like my content? Support me with a tip!
