Global cyber alert: Iranian hackers strike U.S. banks, defence and oil firms

A global cyber alert has been issued after Iranian-backed hackers launched a series of cyberattacks targeting U.S. banks, defense contractors, and oil industry companies. The assaults follow recent American strikes on Iranian nuclear facilities, raising concerns about a significant escalation in digital warfare. While widespread disruptions to critical infrastructure or the broader economy have not yet been reported, U.S. federal authorities remain on high alert, warning that the situation could quickly intensify.

Two pro-Palestinian hacking groups, including one identifying itself as “Mysterious Team,” have claimed responsibility for the attacks. In posts on the Telegram messaging service, they detailed their operations and urged other hackers to join their digital campaign. The attacks primarily consisted of denial-of-service (DoS) assaults, designed to overwhelm websites and online networks, rendering them inaccessible. “We increase attacks from today,” one group declared.

The Department of Homeland Security (DHS) issued a public bulletin on Sunday, cautioning about increased Iranian cyber threats. The Cybersecurity and Infrastructure Security Agency (CISA) followed suit with a statement on Tuesday, urging organizations operating critical infrastructure, such as water systems, pipelines, and power plants, to bolster their defenses and remain vigilant.

Security analysts emphasize that while Iran may not possess the sophisticated offensive cyber capabilities of nations like China or Russia, it has a long-standing reputation as a “chaos agent” in cyberspace. Iranian-aligned actors frequently employ cyberattacks to steal secrets, score political points, and sow fear. Experts warn that even if the Iranian government seeks to avoid further direct confrontation, loosely affiliated or entirely independent hacker groups, many with ties to military or intelligence agencies, could continue to act on Tehran’s behalf. More than 60 such groups have been identified by cybersecurity researchers.

Beyond disruptive attacks, intelligence gathering remains a key objective for Iranian hackers. National security experts anticipate that Tehran will almost certainly continue its efforts to spy on foreign leaders and glean insights into U.S. and Israeli strategic planning. Last year, U.S. authorities charged three Iranian operatives with attempts to hack a prominent U.S. presidential campaign, highlighting the ongoing threat of cyber espionage.

The current cyber offensive underscores the vulnerability of digital infrastructure to state-sponsored and affiliated groups. As the geopolitical landscape remains volatile, cybersecurity experts stress the critical need for robust defenses and continuous vigilance across all sectors of the U.S. economy and government.