Iran-Linked Hackers Launch Cyberattacks Into U.S., Threaten Defense Contractors, Power and Water Systems
Image: PBS

Iran-Linked Hackers Launch Cyberattacks Into U.S., Threaten Defense Contractors, Power and Water Systems

13 March, 2026.Iran.1 sources

Key Takeaways

  • Pro‑Iranian hackers have expanded operations from the Middle East into the United States
  • Hackers target U.S. defense contractors, power stations, and water plants
  • Attacks could expand into wider digital chaos if Tehran's allies join the fray

Scope and targets

Since the war began, these actors have claimed responsibility for disruptive attacks — including one against U.S. medical device firm Stryker — and security experts warn the campaign could grow if Tehran’s allies join in.

Image from PBS
PBSPBS

The activity has prompted U.S. authorities and cyber firms to flag an elevated threat posture for critical infrastructure and private contractors.

Tactics and methods

The attackers use a mix of covert influence operations and direct intrusion techniques, from impersonating activists and operating fake news sites to hacking email accounts and messaging platforms.

Tehran-linked groups have targeted political campaigns, attempted to seize and disseminate stolen files, and established bogus social-media presences designed to seed unrest and misinformation ahead of major events.

Image from PBS
PBSPBS

Simultaneously, operational hacking has aimed at technical systems — including cameras, data centers and industrial networks — that can yield tactical or spying advantages.

Allies and escalation risk

CrowdStrike and other researchers reported a surge of pro‑Iranian activity from Russian-based hackers since the conflict began, with groups such as Z-Pentest claiming disruptive operations against U.S. networks — including systems tied to closed-circuit cameras.

Analysts caution that cooperation from state-aligned or proxy actors could materially increase the scale and sophistication of attacks.

Warnings and advice

U.S. and private-sector responders have issued public warnings and urged heightened cyber hygiene, emphasizing preparedness for disruption.

The Department of Homeland Security issued advisories about Iranian cyber threats, while experts who formerly served in U.S. agencies and private cyber firms told organizations to harden defenses and expect continued probing and potentially damaging intrusions.

Image from PBS
PBSPBS

Observers stress that routine protective steps are especially important now to reduce the chance that critical systems are compromised.

Uncertainties and intent

Experts are watching for possible assistance from Russia, China or aligned hacking groups that could enable strikes designed to undermine U.S. operations or broaden the damage to civilian infrastructure.

Image from PBS
PBSPBS

Analysts warn that the intent in some Iranian-aligned operations is to create disruption and chaos rather than to limit themselves to narrow espionage objectives.

More on Iran