The Law Of War - Critical Infrastructure Cyber Threats

Threat Landscape

When the United States and Israel launched coordinated strikes against Iran on February 28, 2026, the cyber dimension of the conflict activated within hours. What followed was not a centralized Iranian state response, but a swarm of private or pseudo-private attacks. More than sixty Iranian-aligned cyber groups began targeting U.S. and allied critical infrastructure—deploying denial-of-service attacks, reconnaissance against industrial systems, destructive malware, and credential-harvesting campaigns. Three factors distinguish this threat environment from others. First, AI-assisted reconnaissance tools have lowered the technical barriers to targeting industrial control systems. Second, pro-Russian hacktivist groups have aligned with Iranian-linked actors, pooling their joint resources and capabilities. Third, Iranian state-affiliated hackers had already established footholds inside U.S. company networks—including financial institutions, transportation hubs, and