Iranian Cyberattacks Against Israel Surge Threefold, Targeting Critical Infrastructure and Businesses

In February, Israel’s INCD and Shin Bet warned of a campaign of hundreds of highly sophisticated cyberattacks targeting Israeli government officials, security personnel, academics, and media figures since mid-2025.
Israel recently signed an agreement to send a permanent cyber liaison to Germany, reflecting deeper international cooperation, with the Israeli official noting that cooperation with the United States remains 'excellent.'
Yossi Karadi, head of Israel’s National Cyber Directorate, said: 'Some groups are very skilled' and that 'we can handle them, but we have to take them seriously. Unlike in the kinetic realm, there’s no ceasefire in cyberspace,' highlighting the push to develop both offensive and defensive cyber capabilities.
Officials have noted that easier-to penetrate targets, including smaller entities, can end up with their computer systems wiped after breaches, underscoring the breadth of impact beyond large critical infrastructure.
Iranian cyberattacks against Israel have nearly tripled in one year, surging from about 1,600 incidents in June 2025 to roughly 4,800 in June 2026, according to Middle East Eye. The spike followed the U.S.-Israeli military offensive against Iran that began in early 2026, turning the digital front into a relentless second battlefield.
Yossi Karadi, director general of Israel's National Cyber Directorate, made the figures public in a June 2026 interview. "Unlike in the kinetic realm, there is no ceasefire in cyberspace," he said, according to The Jerusalem Post. Targets range from power grids and government offices to small law firms and accounting practices.
The escalation tracks almost perfectly with military events. Israel recorded roughly 1,600 hostile cyber incidents during June 2025, when it launched an initial offensive against Iranian military and nuclear sites, according to Benzinga. After the U.S. and Israel launched a larger operation in February 2026, monthly attacks exploded. By June 2026, they hit 4,800 — a 300% year-over-year jump.
In March 2026, Israel also thwarted 50 attempts by Iranian actors to hijack public and private surveillance cameras across the country. The goal was to gather real-time physical intelligence, according to Aaj TV. The breadth of targets shows Iran is not just looking to disrupt — it wants to watch.
Critical infrastructure like the national power grid has largely held, but smaller organizations are not so lucky. Karadi confirmed that many small law firms and accounting practices have had their entire computer systems wiped after being breached, according to The Kabul Tribune. These businesses lose all their data and often have no way to recover it.
The strategy behind this is deliberate. Iranian-linked groups like MuddyWater and Charming Kitten have shifted from simple data theft to deploying wiper malware — software that destroys data rather than stealing it. Easier targets get hit hardest. Karadi warned that even if a group is not the main prize, attackers will still erase everything they find.
In February 2026, Israel's National Cyber Directorate and the Shin Bet issued a joint warning. They said hundreds of highly sophisticated cyberattacks had been targeting government officials, security personnel, academics, and media figures since mid-2025, according to Middle East Eye. The attacks used targeted phishing — fake but convincing messages designed to steal login credentials.
Analysts from Palo Alto Networks noted that Iranian actors have moved beyond simple scripts. They now use "weaponized legitimate-looking applications," including a fake version of Israel's RedAlert missile warning app, to steal data from mobile devices. Iran denies running any state-sponsored hacking campaigns, calling such reports propaganda.
Israel is not fighting this war alone. In January 2026, Prime Minister Benjamin Netanyahu and German Interior Minister Alexander Dobrindt signed a cybersecurity pact in Jerusalem. It created a permanent Israeli cyber liaison posted to Germany and launched joint training programs, according to Benzinga. Karadi described cooperation with the United States as "excellent."
Germany is now adopting elements of Israel's "Cyber Dome" — an automated system that detects and blocks attacks in real time. The move reflects a broader shift. Nations are now exporting cyber defense systems and liaison officers the same way they once shipped weapons. Karadi put it plainly: "Some groups are very skilled. We can handle them, but we have to take them seriously."
Publishers
22
Articles
79
Reach
101