CYBERATTACKS AGAINST IRAN: A REVIEW OF KEY INCIDENTS AND THEIR STRATEGIC IMPACTS (2010–2026)
DOI:
https://doi.org/10.56238/revgeov17n6-037Keywords:
Cyber Warfare, Iran, Critical Infrastructure, Cybersecurity, Cyber Power, Hybrid ConflictAbstract
This article analyzes the trajectory of the main cyberattacks suffered by Iran between 2010 and 2026. Through a literature review and technical reports, the study maps emblematic incidents, ranging from the emergence of Stuxnet to recent integrated military operations. The research identifies that these offensives shifted from focusing exclusively on the nuclear program to systematically targeting critical civilian infrastructures, such as the energy, transport, and heavy industry sectors. The results indicate that cyberspace has established itself as a domain of hybrid warfare, serving both for technical sabotage and as a tool for psychological and political pressure on the Iranian state. The analysis concludes that the vulnerability to these attacks acted as a catalyst for the development of Iran's defensive and offensive capabilities, positioning the country as an emerging cyber power on the global stage.
Downloads
References
BBC NEWS. Predatory Sparrow: Did hackers start this steel factory fire in Iran? BBC News Technology, 10 jul. 2022. Disponível em: https://www.bbc.com/news/technology-62099474. Acesso em: 6 abr. 2026.
CENTER FOR STRATEGIC AND INTERNATIONAL STUDIES. Iran and Cyber Power. Washington, DC: CSIS, 2019. Disponível em: https://www.csis.org/analysis/iran-and-cyber-power. Acesso em: 8 abr. 2026.
CLAYTON, Mark. Latest cyberattack on Iran targets oil export facilities. The Christian Science Monitor, 23 abr. 2012. Disponível em: https://www.csmonitor.com/USA/2012/0423/Latest-cyberattack-on-Iran-targets-oil-export-facilities. Acesso em: 25 maio 2026.
ELLIPTIC. Iranian Crypto Exchange Nobitex Hacked for Over $90 Million by Pro-Israel Group. London: Elliptic, 18 jun. 2025. Disponível em: https://cyberlaw.ccdcoe.org/wiki/Predatory_Sparrow%E2%80%99s_operations_against_Iranian_financial_cyber_infrastructure_(2025). Acesso em: 22 maio 2026.
FLASHPOINT. Escalation in the Middle East: Tracking "Operation Epic Fury" across military and cyber domains. Flashpoint, 5 maio 2026. Disponível em: https://flashpoint.io/blog/escalation-in-the-middle-east-operation-epic-fury/. Acesso em: 4 abr. 2026.
FREILICH, C. The Iranian Cyber Threat. INSS Memorandum 230. Tel Aviv: Institute for National Security Studies, 2024. Disponível em: https://www.inss.org.il/wp-content/uploads/2024/02/Memo230_IranianCyberThreat_ENG_digital.pdf. Acesso em: 7 abr. 2026.
GOSTEV, A. The Flame: Questions and Answers. Securelist/Kaspersky Lab, 28 maio 2012. Disponível em: https://securelist.com/the-flame-questions-and-answers/34344/. Acesso em: 3 abr. 2026.
GREENBERG, A. How a group of Israel-linked hackers has pushed the limits of cyberwar. Wired, 25 jan. 2024. Disponível em: https://www.wired.com/story/predatory-sparrow-cyberattack-timeline/. Acesso em: 16 abr. 2026.
IRANWIRE. Iranian Lawmakers Hold Closed-Door Session After Hack.14 fev. 2024. Disponível em: https://iranwire.com/en/news/125356-iranian-lawmakers-hold-closed-door-session-after-hack/. Acesso em: 22 maio 2026.
IRAN INTERNATIONAL. Iran interrogating software firm at epicenter of 'worst-ever' bank hack. 6 set. 2024. Disponível em: https://www.iranintl.com/en/202409048166. Acesso em: 22 maio 2026.
INTERNATIONAL INSTITUTE FOR COUNTER-TERRORISM (ICT). Operations "Epic Fury" & "Roaring Lion". Herzliya: ICT, 2026. Disponível em: https://ict.org.il/operations-epic-fury-roaring-lion/. Acesso em: 7 abr. 2026.
NARAINE, R. Researchers link mysterious 'MeteorExpress' wiper to Iranian train cyberattack. SecurityWeek, 29 jul. 2021. Disponível em: https://www.securityweek.com/researchers-link-mysterious-meteorexpress-wiper-iranian-train-cyberattack/. Acesso em: 6 abr. 2026.
NAKASHIMA, E. Officials: Israel linked to a disruptive cyberattack on Iranian port facility. The Washington Post, 18 maio 2020. Disponível em: https://www.washingtonpost.com/national-security/officials-israel-linked-to-a-disruptive-cyberattack-on-iranian-port-facility/2020/05/18/9d1da866-9942-11ea-89fd-28fb313d1886_story.html. Acesso em: 9 abr. 2026.
NEXTGOV/FCW. How Cyber Command contributed to Operation Epic Fury against Iran. Nextgov/FCW, 3 mar. 2026. Disponível em: https://www.nextgov.com/cybersecurity/2026/03/how-cyber-command-contributed-operation-epic-fury-against-iran/411818/. Acesso em: 5 abr. 2026.
NYE, J. S. Jr. Cyber Power. Cambridge, MA: Belfer Center for Science and International Affairs, Harvard Kennedy School, 2010. Disponível em: https://www.belfercenter.org/sites/default/files/pantheon_files/files/publication/cyber-power.pdf. Acesso em: 6 abr. 2026.
REUTERS. Iran says cyberattack causes widespread disruption at gas stations. Euronews, 27 out. 2021. Disponível em: https://www.euronews.com/next/2021/10/27/iran-gasoline-cyberattack. Acesso em: 12 abr. 2026.
FRITZHAND, Troy O. Israel-linked hackers claim cyberattack that shuts down 70% of Iran’s gas stations. Algemeiner, 18 dez. 2023. Disponível em: <https://www.algemeiner.com/2023/12/18/israel-linked-hackers-claim-cyberattack-shuts-down-70-irans-gas-stations/>. Acesso em: 13 abr. 2026.
RID, T. Cyber war will not take place. Journal of Strategic Studies, Londres, v. 35, n. 1, p. 5-32, fev. 2012. DOI: 10.1080/01402390.2011.608939.
ROTHER, E. T. Revisão sistemática X revisão narrativa. Acta Paulista de Enfermagem, São Paulo, v. 20, n. 2, p. v-vi, 2007. Disponível em: https://www.scielo.br/j/ape/a/z7zZ4Z4GwYV6FR7S9FHTByr/?lang=pt. Acesso em: 15 abr. 2026.
SANGER, D. E. Confront and Conceal: Obama's Secret Wars and Surprising Use of American Power. New York: Crown/Random House, 2012.
SECURITY AFFAIRS. Iran railway attack: Meteor wiper linked to the incident. Security Affairs, jul. 2021. Disponível em: https://securityaffairs.com/120679/malware/meteor-wiper-irans-national-railway.html. Acesso em: 16 abr. 2026. - mudar para
SHAFA, E. K. Iran's Emergence as a Cyber Power. Carlisle, PA: Strategic Studies Institute, U.S. Army War College, 2014. Disponível em: https://ssi.armywarcollege.edu/SSI-Media/Recent-Publications/Article/3614420/irans-emergence-as-a-cyber-power/. Acesso em: 12 abr. 2026.
TENABLE. Operation Epic Fury: Potential Iranian cyber counteroffensive operations. Tenable Blog, 3 mar. 2026. Disponível em: https://www.tenable.com/blog/operation-epic-fury-potential-iranian-cyber-counteroffensive-operations. Acesso em: 6 abr. 2026. (Tenable, 2026a).
TENABLE. Iranian-linked actors are engaging in disruptive attacks. Tenable Blog, 11 mar. 2026. Disponível em: https://www.tenable.com/blog/cyber-retaliation-analyzing-iranian-cyber-activity-following-operation-epic-fury. Acesso em: 6 abr. 2026. (Tenable, 2026b).
THE IRAN PRIMER (USIP). The Invisible U.S.-Iran Cyber War. Washington, DC: United States Institute of Peace, 2022. Disponível em: https://iranprimer.usip.org/blog/2019/oct/25/invisible-us-iran-cyber-war. Acesso em: 6 abr. 2026.
TIDY, J. What role has cyber warfare played in Iran? BBC News, 12 mar. 2026. Disponível em: https://www.bbc.com/news/articles/c5yr0576ygvo. Acesso em: 4 abr. 2026.
WIRED. Meet 'Flame,' the massive spy malware infiltrating Iranian computers. Wired, 28 maio 2012. Disponível em: https://www.wired.com/2012/05/flame/. Acesso em: 2 abr. 2026.
ZETTER, K. Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon. New York: Crown Publishing Group, 2014.
ZETTER, K. Hackers leak surveillance camera videos purportedly taken from inside Iran's Evin Prison. Zetter Zero Day, 24 ago. 2021. Disponível em: https://www.zetter-zeroday.com/hackers-leak-surveillance-camera/. Acesso em: 2 abr. 2026.
