Digital Battlefield Emerges: Israel-Iran Cyber Conflict Escalates Globally

By Frank Jones, CISSP   Published: 06/17/25   Updated: 10/26/26   3 min read

Digital Battlefield Emerges: Israel-Iran Cyber Conflict Escalates Globally

Summary

A cyber front in the Israel-Iran war

The cyber conflict between Israel and Iran stepped up sharply in June 2025 alongside the military strikes between the two countries. The digital fight is not new. Both sides have targeted each other’s infrastructure for years.

In 2020, a cyberattack disrupted Iran’s Shahid Rajaee port, an attack widely attributed to Israel. Earlier that year, Israel said attackers tried to tamper with its water systems, which officials blamed on Iran. In June 2025, a pro-Israel group called Predatory Sparrow claimed it destroyed data at Iran’s state-owned Bank Sepah on June 17, then hit the Nobitex cryptocurrency exchange the next day, where analysts tracked more than $90 million sent to addresses nobody can access.

Infrastructure in the line of fire

Hacker groups aligned with each side make the conflict harder to predict. They go after targets that affect daily life, from banks and fuel systems to utilities and transport.

Attacks on financial services hit ordinary people quickly. Bank Sepah customers faced disruptions after the June attack.

Spillover beyond the region

The direct conflict is between Israel and Iran, but the risk spreads. Hacking tools and techniques move between groups, and allies of each country can be targeted.

Companies with links to either side have reason to raise their guard. U.S. agencies warned in June 2025 that Iranian-linked actors could target American networks in response to the strikes.

Removed claims

An earlier version of this article described a large cyberattack on a European power grid linked to the conflict, and a disruption of Tehran’s transit network. Neither claim could be confirmed, and both have been removed.

How defenders are responding

Countries are sharing more intelligence and coordinating responses.

Security experts recommend layered defenses for critical infrastructure: real-time threat detection, public-private partnerships, and regular updates to security controls. Basic steps such as changing default passwords on internet-connected industrial devices still prevent many attacks.

Attributed comment removed

A quote attributed to a “Dr. Sabine Fischer” in an earlier version could not be verified and has been removed.

What comes next

The Israel-Iran cyber conflict shows how quickly digital attacks follow military ones, and how they can reach banks and other civilian targets within days. Infrastructure operators far from the region should plan for that.

Preparation is the practical response. Patch internet-facing systems, lock down remote access, and know who to call before an attack hits.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.