Epic Fury Cyber Shock: Iran’s Internet Down, Hacktivists Hit Back

Following coordinated U.S. and Israeli military operations on Feb 28, 2026, Iran experienced a near-total internet blackout that disrupted state APT coordination and enabled a trans-regional cyber confrontation: geographically dispersed hacktivists and proxies launched DDoS, defacements, phishing (including a malicious replica of Israel’s RedAlert Android app), and opportunistic data theft, while Iranian state-sponsored actors (tracked as Serpens) continue espionage, disruptive operations, AI-assisted spear-phishing, and exploitation of known vulnerabilities; organizations are advised to strengthen patching, phishing defenses, DDoS preparedness, identity security, and continuous monitoring.