Trending Now - Digital Warfare Intensifies: Iran Conflict Highlights Cyber Threats

WHO:

ABC News - Gil Messing, chief of staff at Check Point Research, stated that the timing of the bogus texts was synchronized with missile strikes, marking a first in cyber conflict tactics.

ABC News - Iran, Israel, the U.S., hackers supporting Iran, Gil Messing (chief of staff at Check Point Research), Michael Smith (field chief technology officer at DigiCert), Kash Patel (FBI Director), Cynthia Kaiser (senior vice president at Halcyon), Tulsi Gabbard (Director of National Intelligence).

AP News - Pro-Iranian hacking groups, Handala (a hacking group), Iranian state-run media, U.S. authorities.

WHAT:

AP News - Hackers supporting Iran have launched thousands of cyberattacks on companies and organizations since the conflict began on February 1st, 2026.

AP News - Investigators at DigiCert have tracked nearly 5,800 cyberattacks attributed to about 50 different groups tied to Iran as of March 29th, 2026.

AP News - A pro-Iranian hacking group claimed responsibility for infiltrating Kash Patel's account on March 25th, 2026, posting years-old photographs and personal documents.

AP News - The attack on Stryker, a Michigan-based medical technology company, was claimed by the group Handala as retaliation for U.S. strikes that killed Iranian schoolchildren.

AP News - Hackers supporting Iran have conducted nearly 5,800 cyberattacks attributed to about 50 different groups tied to Iran since the conflict began in February 2026.

AP News - A pro-Iranian hacking group claimed responsibility for infiltrating Kash Patel's account on March 25th, 2026, posting years-old photographs and personal documents.

ABC News - Iran has launched thousands of cyberattacks on companies and organizations since the conflict began in February 2026.

AP News - Hackers supporting Iran have conducted nearly 5,800 cyberattacks attributed to about 50 different groups.

AP News - A pro-Iranian hacking group claimed responsibility for infiltrating Kash Patel's account, posting years-old photographs and personal documents.

AP News - Hackers targeted Stryker, a Michigan-based medical technology company, claiming the attack was retaliation for U.S. strikes that killed Iranian schoolchildren.

AP News - Cyberattacks on healthcare companies have involved the use of destructive ransomware without ransom demands.

WHERE:

AP News - Attacks have also been reported on networks in Bahrain, Kuwait, and Qatar.

ABC News - The cyberattacks primarily targeted U.S. and Israeli companies, with incidents also reported in Bahrain, Kuwait, and Qatar.

AP News - The attack on Stryker occurred in Michigan.

WHEN:

ABC News - The conflict began in February 2026.

AP News - The infiltration of Kash Patel's account was reported on March 25th, 2026.

WHY:

AP News - The attacks are intended to intimidate opponents and boost morale among supporters, with a deliberate focus on the medical sector.

AP News - The attacks are designed to intimidate opponents and boost morale among supporters, with a focus on the medical sector as a deliberate target.

ABC News - Iran seeks to use cyber capabilities to compensate for military disadvantages in its conflict with Israel and the U.S.

AP News - The attacks are intended to intimidate opponents and boost morale among supporters.

HOW:

AP News - Hackers used a tool linked to Iran to install destructive ransomware on a healthcare company, shutting the company out of its own network without demanding a ransom.

ABC News - Hackers used a text message with a link to spyware that accessed users' devices during missile strikes.

AP News - Cyberattacks are characterized as high-volume, low-impact, often easily thwarted by modern cybersecurity measures.

AP News - AI is being utilized to increase the volume and speed of cyberattacks and to automate processes.

(UPDATED March 29, 2026 15:03 UTC)

Since the conflict began February 1st, hackers supporting Iran have launched thousands of cyberattacks, with investigators at DigiCert tracking nearly 5,800 incidents attributed to around 50 different groups as of on Sunday. Among these attacks, a pro-Iranian hacking group took responsibility for infiltrating Kash Patel's account on Wednesday, posting personal documents and photographs, while another group, Handala, claimed an attack on the Michigan-based medical technology company Stryker as retaliation for U.S. strikes that killed Iranian schoolchildren. These cyberattacks are aimed at intimidating opponents and boosting morale among supporters, particularly targeting the medical sector, with hackers using tools linked to Iran to install destructive ransomware that locks companies out of their networks without demanding a ransom.

(UPDATED March 29, 2026 13:17 UTC)

In a significant development, hackers supporting Iran have launched nearly 5,800 cyberattacks since the conflict began in February 20th26, with tactics that now include synchronizing bogus texts with missile strikes, according to Gil Messing, chief of staff at Check Point Research. on Wednesday, a pro-Iranian hacking group infiltrated Kash Patel's account, posting years-old photographs and personal documents, while similar attacks have also targeted networks in Bahrain, Kuwait, and Qatar, particularly focusing on the medical sector. These cyberattacks aim to intimidate opponents and boost morale among supporters, with one notable incident involving the installation of destructive ransomware on a healthcare company, effectively locking the organization out of its own network without any ransom demands.

(UPDATED March 29, 2026 09:09 UTC)

Iran has launched thousands of cyberattacks on U.S. and Israeli companies since the conflict began in February 20th26, with nearly 5,800 attacks attributed to about 50 different pro-Iranian hacking groups. Recently, a hacking group claimed responsibility for infiltrating the account of FBI Director Kash Patel and targeted Stryker, a Michigan-based medical technology company, in retaliation for U.S. strikes that resulted in civilian casualties. These cyberattacks, which often involve destructive ransomware without ransom demands, are part of Iran's strategy to leverage its cyber capabilities to intimidate opponents and boost morale among its supporters.