The U.S. government has warned that Iranian-linked hackers may target American defense firms and critical infrastructure operators.
A joint advisory was issued Monday by the FBI, NSA, Department of Defense Cyber Crime Center (DC3), and Department of Homeland Security.
The warning follows increased tensions in the Middle East, especially between Israel, Iran, and the United States.
Officials said no major Iranian cyberattacks have occurred yet, but companies should still strengthen their cybersecurity immediately.
The advisory highlighted that Iranian-affiliated hackers often exploit unpatched software and weak or default passwords on internet-connected devices.
Hackers also collaborate with ransomware groups to steal, encrypt, or leak sensitive information.
These tactics have become common among Iranian state-backed cyber actors, the agencies said.
Even amid ceasefire talks, Iranian-backed hackers and hacktivists may continue launching cyber operations, according to the U.S. government.
The concern is especially high for U.S. firms tied to Israeli defense and technology partners.
Experts say companies in energy, water, defense, and communications are at high risk.
Back in November 2023, Iranian hackers attacked water treatment facilities across several U.S. states.
They exploited Israeli-made equipment, according to officials, shortly after Hamas launched its October 2023 attack on Israel.
The attackers are believed to have links to Iran’s Islamic Revolutionary Guard Corps.
Cybersecurity researchers have not seen widespread Iranian cyber activity since Israel declared war on June 13, 2025.
That war was followed by U.S. strikes on Iranian nuclear facilities on June 22.
Officials believe a retaliatory cyber campaign could still occur, especially targeting infrastructure and military contractors.
The agencies recommend companies patch all systems, update credentials, and monitor unusual activity.
They also urge staff to report suspicious emails and system behavior immediately.
Iran is known for using cyber tools to retaliate against geopolitical rivals, particularly Israel and the U.S.
With ongoing global tensions, experts say vigilance is more important than ever.
The warning highlights a growing concern over nation-state cyber threats and critical infrastructure vulnerability.
Companies were urged to follow best practices and consult federal cybersecurity partners for support.
