Iranian hackers were more coordinated, aligned during Israel conflict than it seemed | CyberScoop<\/title> <meta name=\"description\" content=\"The apparently disjointed response from Iranian hackers to the 12-day conflict with Israel in June actually demonstrated a significant degree of alignment and coordination, according to research published Tuesday.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/iranian-hackers-12-day-conflict-hacktivism-securityscorecard\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Iranian hackers were more coordinated, aligned during Israel conflict than it seemed\"> <meta property=\"og:description\" content=\"The apparently disjointed response from Iranian hackers to the 12-day conflict with Israel in June actually demonstrated a significant degree of alignment and coordination, according to research published Tuesday.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/iranian-hackers-12-day-conflict-hacktivism-securityscorecard\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2025-08-05T17:39:27+00:00\"> <meta property=\"article:modified_time\" content=\"2025-08-05T17:39:30+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1371\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Tim Starks\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@timstarks\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1752617955g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1753141563g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1753281318g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/85456\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.8.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=85456\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Firanian-hackers-12-day-conflict-hacktivism-securityscorecard%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Firanian-hackers-12-day-conflict-hacktivism-securityscorecard%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-85456 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/iranian-hackers-12-day-conflict-hacktivism-securityscorecard\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.880289532294\">\n<div class=\"single-article__header-content\" readability=\"34.334801762115\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/iranian-hackers-12-day-conflict-hacktivism-securityscorecard\/\"> <span>Geopolitics<\/span> <\/a> <\/li>\n<\/ul>\n<p> SecurityScorecard and the Middle East Institute said in separate reports this week that Iranian hacker operations during the 12-day conflict exhibited clear strategic intent. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/85456\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"457\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed.jpg?resize=640%2C457&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=300,214 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=768,548 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=1024,731 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=1536,1097 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=600,428 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=235,168 235w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=472,337 472w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=945,675 945w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-2.jpg?resize=1181,843 1181w\" sizes=\"(max-width: 945px) 100vw, 945px\"><figcaption> Smoke rises as Israel targets the notorious Evin Prison in north of Tehran, Iran, on June 23, 2025. Evin prison has been known as the place where Iran imprisons mostly political activists, dissidents and journalists. Media reports say that administrative building and the hospital of Evin prison have been damaged, and a number of families of inmates and prison staff have been killed and wounded. (Photo by Nikan \/ Middle East Images via AFP) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"30.701438848921\"><body readability=\"63.842164599775\"><\/p>\n<p>The apparently disjointed response from Iranian hackers to the 12-day conflict with Israel in June actually demonstrated a significant degree of alignment and coordination, according to research published Tuesday.<\/p>\n<p>SecurityScorecard\u2019s STRIKE Team analyzed 250,000 messages from Iranian proxies and hacktivists from more than 178 groups whose activity ranged from pushing propaganda to stealing data to defacing websites to launching cyberattacks.<\/p>\n<p>\u201cOur analysis reveals a detailed map of operations that were fast, targeted, and ideologically charged,\u201d <a href=\"https:\/\/securityscorecard.com\/wp-content\/uploads\/2025\/08\/From-The-Depths-of-the-Shadows_IRGC-and-Hacker-Collectives_AUG5.pdf\">its report states<\/a>. \u201cIn many cases, the threat groups appear to have coordinated their operations with agility and deep alignment.\u201d<\/p>\n<p>Separately Monday, the Middle East Institute <a href=\"https:\/\/mei.edu\/publications\/digital-frontlines-what-12-day-war-revealed-about-evolution-irans-cyber-strategy\">published an analysis<\/a> that arrived at similar conclusions.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cIran\u2019s conduct in cyberspace during the 12-day war marked a turning point in its cyber strategy, reflecting greater coordination, clearer strategic intent, and the integration of digital tools across military, political, and psychological domains,\u201d Nima Khorrami, an analyst at NSSG Global and a research associate at the Arctic Institute, wrote for the think tank.<\/p>\n<p>The cyber fallout from the 12-day conflict led to <a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/iranian-cyber-actors-may-target-vulnerable-us-networks-and-entities-interest\">a warning from the U.S. government<\/a> about potential spillover. But some have questioned how effective any of the cyber operations between Iran and Israel were.<\/p>\n<p>\u201cIt can be easy to conflate the volume of cyber activity in the Israel-Iran war with decisive impact,\u201d Nikita Shah, a senior resident fellow at the Atlantic Council\u2019s Cyber Statecraft Initiative, <a href=\"https:\/\/www.atlanticcouncil.org\/blogs\/new-atlanticist\/what-the-israel-iran-conflict-revealed-about-wartime-cyber-operations\/\">wrote last week<\/a>. \u201cBut the value of cyber attacks for each state came from them serving as a means of shaping and augmenting the information environment, rather than bringing the conflict to a conclusive end. While these incidents may have caused harm or disruption in the short-term, they failed to provide any decisive military advantage. Instead, the impact was disproportionately felt by ordinary Iranian and Israeli citizens.\u201d<\/p>\n<p>SecurityScorecard highlighted how one group, the Iranian government-connected group known as Imperial Kitten or Tortoiseshell, changed tactics as the fighting grew more intense. It began using conflict-themed phishing lures and built infrastructure for the campaign almost immediately after the onset of physical battles.<\/p>\n<p>That suggested the group \u201chas planning or tasking cycles that respond quickly to conflict flashpoints,\u201d SecurityScorecard said.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Further Iranian hacking activity included conducting reconnaissance, recruiting on the Telegram messaging app and advertising vulnerabilities, the company observed.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\">\n<div class=\"author-card\" readability=\"7.7216117216117\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed-1.jpg?w=640&ssl=1\" alt=\"Tim Starks\"> <\/figure>\n<\/p><\/div>\n<div class=\"author-card__details\" readability=\"10.901098901099\">\n<h4 class=\"author-card__name\">Written by Tim Starks<\/h4>\n<p> Tim Starks is senior reporter at CyberScoop. His previous stops include working at The Washington Post, POLITICO and Congressional Quarterly. An Evansville, Ind. native, he’s covered cybersecurity since 2003. Email Tim here: <a href=\"mailto:tim.starks@cyberscoop.com\">tim.starks@cyberscoop.com<\/a>. <\/div>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/iranian-hackers-12-day-conflict-hacktivism-securityscorecard\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Iranian hackers were more coordinated, aligned during Israel conflict than<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1911,302,353,1965,1593,513,514,4746,288,4606],"tags":[1914,306,357,1966,1596,517,518,4747,294,4607],"class_list":["post-7866","post","type-post","status-publish","format-standard","hentry","category-atlantic-council","category-geopolitics","category-hacktivism","category-hacktivists","category-imperial-kitten","category-iran","category-israel","category-middle-east-institute","category-threats","category-website-defacement","tag-atlantic-council","tag-geopolitics","tag-hacktivism","tag-hacktivists","tag-imperial-kitten","tag-iran","tag-israel","tag-middle-east-institute","tag-threats","tag-website-defacement"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/atlantic-council\/\" rel=\"category tag\">atlantic council<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/geopolitics\/\" rel=\"category tag\">Geopolitics<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/hacktivism\/\" rel=\"category tag\">hacktivism<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/hacktivists\/\" rel=\"category tag\">hacktivists<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/imperial-kitten\/\" rel=\"category tag\">Imperial Kitten<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/iran\/\" rel=\"category tag\">Iran<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/israel\/\" rel=\"category tag\">Israel<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/middle-east-institute\/\" rel=\"category tag\">Middle East Institute<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/threats\/\" rel=\"category tag\">Threats<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/website-defacement\/\" rel=\"category tag\">website defacement<\/a>","tag_info":"website defacement","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7866","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=7866"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7866\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=7866"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=7866"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=7866"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":7866,"date":"2025-08-05T12:39:27","date_gmt":"2025-08-05T17:39:27","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=85456"},"modified":"2025-08-05T12:39:27","modified_gmt":"2025-08-05T17:39:27","slug":"iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2025\/08\/05\/iranian-hackers-were-more-coordinated-aligned-during-israel-conflict-than-it-seemed\/","title":{"rendered":"Iranian hackers were more coordinated, aligned during Israel conflict than it seemed"},"content":{"rendered":"