A bulletin issued Sunday by U.S. Homeland Security said it expects to see Iranian government-backed hackers conduct attacks against U.S. networks, amid the ongoing conflict between the U.S. and Israel, and Iran.
The National Terrorism Advisory System bulletin said low-level cyberattacks by hacktivists are “likely,” adding that hacktivists and government-linked hackers “routinely target” poorly secured U.S. networks and internet-connected devices to cause disruption.
The bulletin was published days after a series of U.S. and Israeli air strikes targeted Iran’s nuclear program, which appeared to coincide with destructive hacks carried out by a pro-Israel hacking group, dubbed Predatory Sparrow. The hackers took out one of Iran’s top banks and destroyed millions in cryptocurrency held by the country’s largest crypto exchange.
Following the initial round of Israeli air strikes, the Iranian government confirmed it shut down the country’s internet to protect against cyberattacks.
Iran is known for its offensive cyber capabilities, including long-running espionage operations targeting senior U.S. politicians and government officials, as well as disruptive cyberattacks designed to steal data from businesses and tech giants, often by using known vulnerabilities or stolen passwords.