Global Threat Matrix

Iranian Cyber Attacks on US Critical Infrastructure

Iranian Cyber Attacks on US Critical Infrastructure

Key Questions

Which groups are behind the recent Iranian cyber attacks on US infrastructure?

Iran-linked groups such as Handala and CyberAv3ngers are responsible for the first major operations since the war began, targeting critical sectors.

What specific targets have been hit by these cyber attacks?

Attacks have disrupted Stryker medical devices through wipes, and energy/water PLCs using Rockwell systems; additional hits on US oil, gas, and water sites were reported by the FBI.

What is the scale of these cyber threats according to authorities?

Multi-agency warnings highlight intensifying threats to critical infrastructure, with FBI reports noting US cybercrime losses at $21 billion and sharp escalations in 2026.

How have Iranian hackers escalated their operations?

Iranian threat actors have escalated attacks on US critical infrastructure amid rising tensions, even during the ceasefire, targeting sectors like oil, gas, and water.

What recommendations are issued for mitigation?

Federal agencies urge immediate mitigations against these hybrid escalations, as Iran-affiliated attackers continue targeting despite the temporary ceasefire.

Iran-linked Handala/CyberAv3ngers hit Stryker (device wipes) and energy/water PLCs (Rockwell); first major op since war start. Multi-agency warnings urge mitigations amid hybrid escalation.

Sources (6)
Updated Apr 8, 2026