CIBERATAQUES CONTRA IRÁN: UN ANÁLISIS DE LOS INCIDENTES CLAVE Y SUS REPERCUSIONES ESTRATÉGICAS (2010-2026)
DOI:
https://doi.org/10.56238/revgeov17n6-037Palabras clave:
Guerra Cibernética, Irán, Infraestructura Crítica, Ciberseguridad, Conflicto HíbridoResumen
Este artículo analiza la trayectoria de los principales ciberataques sufridos por Irán entre 2010 y 2026. Mediante una revisión de la literatura y los informes técnicos, el estudio traza un mapa de los incidentes desde el surgimiento de Stuxnet hasta las recientes operaciones militares integradas. La investigación identifica que las ofensivas han cambiado su enfoque, pasando de atacar exclusivamente el programa nuclear a atacar sistemáticamente infraestructuras civiles críticas, como los sectores de energía, transporte e industria pesada. Los resultados indican que el ciberespacio se ha consolidado como un dominio de guerra híbrida, funcionando tanto para el sabotaje técnico como para ejercer presión psicológica y política sobre el Estado iraní. El análisis concluye que la vulnerabilidad a estos ataques actuó como catalizador para el desarrollo de las capacidades defensivas y ofensivas de Irán, posicionándolo como una potencia cibernética emergente en el escenario global.
Descargas
Referencias
BBC NEWS. Predatory Sparrow: Did hackers start this steel factory fire in Iran? BBC News Technology, 10 jul. 2022. Disponível em: https://www.bbc.com/news/technology-62099474. Acesso em: 6 abr. 2026.
CENTER FOR STRATEGIC AND INTERNATIONAL STUDIES. Iran and Cyber Power. Washington, DC: CSIS, 2019. Disponível em: https://www.csis.org/analysis/iran-and-cyber-power. Acesso em: 8 abr. 2026.
CLAYTON, Mark. Latest cyberattack on Iran targets oil export facilities. The Christian Science Monitor, 23 abr. 2012. Disponível em: https://www.csmonitor.com/USA/2012/0423/Latest-cyberattack-on-Iran-targets-oil-export-facilities. Acesso em: 25 maio 2026.
ELLIPTIC. Iranian Crypto Exchange Nobitex Hacked for Over $90 Million by Pro-Israel Group. London: Elliptic, 18 jun. 2025. Disponível em: https://cyberlaw.ccdcoe.org/wiki/Predatory_Sparrow%E2%80%99s_operations_against_Iranian_financial_cyber_infrastructure_(2025). Acesso em: 22 maio 2026.
FLASHPOINT. Escalation in the Middle East: Tracking "Operation Epic Fury" across military and cyber domains. Flashpoint, 5 maio 2026. Disponível em: https://flashpoint.io/blog/escalation-in-the-middle-east-operation-epic-fury/. Acesso em: 4 abr. 2026.
FREILICH, C. The Iranian Cyber Threat. INSS Memorandum 230. Tel Aviv: Institute for National Security Studies, 2024. Disponível em: https://www.inss.org.il/wp-content/uploads/2024/02/Memo230_IranianCyberThreat_ENG_digital.pdf. Acesso em: 7 abr. 2026.
GOSTEV, A. The Flame: Questions and Answers. Securelist/Kaspersky Lab, 28 maio 2012. Disponível em: https://securelist.com/the-flame-questions-and-answers/34344/. Acesso em: 3 abr. 2026.
GREENBERG, A. How a group of Israel-linked hackers has pushed the limits of cyberwar. Wired, 25 jan. 2024. Disponível em: https://www.wired.com/story/predatory-sparrow-cyberattack-timeline/. Acesso em: 16 abr. 2026.
IRANWIRE. Iranian Lawmakers Hold Closed-Door Session After Hack.14 fev. 2024. Disponível em: https://iranwire.com/en/news/125356-iranian-lawmakers-hold-closed-door-session-after-hack/. Acesso em: 22 maio 2026.
IRAN INTERNATIONAL. Iran interrogating software firm at epicenter of 'worst-ever' bank hack. 6 set. 2024. Disponível em: https://www.iranintl.com/en/202409048166. Acesso em: 22 maio 2026.
INTERNATIONAL INSTITUTE FOR COUNTER-TERRORISM (ICT). Operations "Epic Fury" & "Roaring Lion". Herzliya: ICT, 2026. Disponível em: https://ict.org.il/operations-epic-fury-roaring-lion/. Acesso em: 7 abr. 2026.
NARAINE, R. Researchers link mysterious 'MeteorExpress' wiper to Iranian train cyberattack. SecurityWeek, 29 jul. 2021. Disponível em: https://www.securityweek.com/researchers-link-mysterious-meteorexpress-wiper-iranian-train-cyberattack/. Acesso em: 6 abr. 2026.
NAKASHIMA, E. Officials: Israel linked to a disruptive cyberattack on Iranian port facility. The Washington Post, 18 maio 2020. Disponível em: https://www.washingtonpost.com/national-security/officials-israel-linked-to-a-disruptive-cyberattack-on-iranian-port-facility/2020/05/18/9d1da866-9942-11ea-89fd-28fb313d1886_story.html. Acesso em: 9 abr. 2026.
NEXTGOV/FCW. How Cyber Command contributed to Operation Epic Fury against Iran. Nextgov/FCW, 3 mar. 2026. Disponível em: https://www.nextgov.com/cybersecurity/2026/03/how-cyber-command-contributed-operation-epic-fury-against-iran/411818/. Acesso em: 5 abr. 2026.
NYE, J. S. Jr. Cyber Power. Cambridge, MA: Belfer Center for Science and International Affairs, Harvard Kennedy School, 2010. Disponível em: https://www.belfercenter.org/sites/default/files/pantheon_files/files/publication/cyber-power.pdf. Acesso em: 6 abr. 2026.
REUTERS. Iran says cyberattack causes widespread disruption at gas stations. Euronews, 27 out. 2021. Disponível em: https://www.euronews.com/next/2021/10/27/iran-gasoline-cyberattack. Acesso em: 12 abr. 2026.
FRITZHAND, Troy O. Israel-linked hackers claim cyberattack that shuts down 70% of Iran’s gas stations. Algemeiner, 18 dez. 2023. Disponível em: <https://www.algemeiner.com/2023/12/18/israel-linked-hackers-claim-cyberattack-shuts-down-70-irans-gas-stations/>. Acesso em: 13 abr. 2026.
RID, T. Cyber war will not take place. Journal of Strategic Studies, Londres, v. 35, n. 1, p. 5-32, fev. 2012. DOI: 10.1080/01402390.2011.608939.
ROTHER, E. T. Revisão sistemática X revisão narrativa. Acta Paulista de Enfermagem, São Paulo, v. 20, n. 2, p. v-vi, 2007. Disponível em: https://www.scielo.br/j/ape/a/z7zZ4Z4GwYV6FR7S9FHTByr/?lang=pt. Acesso em: 15 abr. 2026.
SANGER, D. E. Confront and Conceal: Obama's Secret Wars and Surprising Use of American Power. New York: Crown/Random House, 2012.
SECURITY AFFAIRS. Iran railway attack: Meteor wiper linked to the incident. Security Affairs, jul. 2021. Disponível em: https://securityaffairs.com/120679/malware/meteor-wiper-irans-national-railway.html. Acesso em: 16 abr. 2026. - mudar para
SHAFA, E. K. Iran's Emergence as a Cyber Power. Carlisle, PA: Strategic Studies Institute, U.S. Army War College, 2014. Disponível em: https://ssi.armywarcollege.edu/SSI-Media/Recent-Publications/Article/3614420/irans-emergence-as-a-cyber-power/. Acesso em: 12 abr. 2026.
TENABLE. Operation Epic Fury: Potential Iranian cyber counteroffensive operations. Tenable Blog, 3 mar. 2026. Disponível em: https://www.tenable.com/blog/operation-epic-fury-potential-iranian-cyber-counteroffensive-operations. Acesso em: 6 abr. 2026. (Tenable, 2026a).
TENABLE. Iranian-linked actors are engaging in disruptive attacks. Tenable Blog, 11 mar. 2026. Disponível em: https://www.tenable.com/blog/cyber-retaliation-analyzing-iranian-cyber-activity-following-operation-epic-fury. Acesso em: 6 abr. 2026. (Tenable, 2026b).
THE IRAN PRIMER (USIP). The Invisible U.S.-Iran Cyber War. Washington, DC: United States Institute of Peace, 2022. Disponível em: https://iranprimer.usip.org/blog/2019/oct/25/invisible-us-iran-cyber-war. Acesso em: 6 abr. 2026.
TIDY, J. What role has cyber warfare played in Iran? BBC News, 12 mar. 2026. Disponível em: https://www.bbc.com/news/articles/c5yr0576ygvo. Acesso em: 4 abr. 2026.
WIRED. Meet 'Flame,' the massive spy malware infiltrating Iranian computers. Wired, 28 maio 2012. Disponível em: https://www.wired.com/2012/05/flame/. Acesso em: 2 abr. 2026.
ZETTER, K. Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon. New York: Crown Publishing Group, 2014.
ZETTER, K. Hackers leak surveillance camera videos purportedly taken from inside Iran's Evin Prison. Zetter Zero Day, 24 ago. 2021. Disponível em: https://www.zetter-zeroday.com/hackers-leak-surveillance-camera/. Acesso em: 2 abr. 2026.
