Iran's cyberwar has begun

Iranian state-linked cyber actors (e.g., Cotton Sandstorm/Haywire Kitten and affiliated hacktivist fronts) have conducted sustained reconnaissance, API/mobile probing, espionage, DDoS, disinformation, and staged malware and ransomware campaigns (WezRat infostealer, WhiteLock ransomware) targeting Israel, Gulf states and potentially US-linked organizations; researchers observed pre-positioning of tools, claims of ICS compromises, and a likely elevated threat posture for critical infrastructure and supply chains as the conflict continues.