(NCS) — “You must report immediately in case of any security incident,” learn a textual content message despatched to telephones within the United Arab Emirates from “MOI” through the Iran war. But the nation’s Ministry of Interior by no means despatched such an alert. It later cautioned residents against performing on the “fake” message.
In a rustic that bore the brunt of Iranian assaults as Tehran retaliated against Israel and the United States, authorities say the nation additionally confronted barrages of a extra insidious nature.
The UAE had already observed a pointy spike in cyberattacks weeks earlier than the war, Mohamed Al Kuwaiti, the pinnacle of cybersecurity for the UAE Government, advised state media final month. In the early days of the war, he stated, cyber-attacks from Iranian proxies grew to 500,000 a day, principally focusing on crucial infrastructure
“After the (war began) the internet was cut (in Iran) yet their proxies continued (attacking us) from…outside of Iran,” he stated. “Many people received phishing emails asking people to click on links…which began as data gathering and then transformed to become destructive.”
During the war, Iran and its proxies launched hundreds of missiles and drones at as many as 12 American-allied states in retaliation against US-Israeli strikes on its territory. But it’s on the much less seen entrance – the psychological and data war – the place Tehran has had an outsized impression.
Threatening textual content messages purporting be from Iran’s Revolutionary Guards advised Israelis to “wait for death” as evacuation orders – mimicking the Israeli navy’s controversial fashion utilized in Gaza and Lebanon – urged civilians close to crucial infrastructure and main residential neighborhoods in Gulf Arab states to depart.
Attacks on net servers early March disrupted banking programs within the United Arab Emirates and Bahrain, halting monetary transactions and on a regular basis banking actions. Iran’s Revolutionary Guards introduced a success listing of American corporations and universities working within the Middle East – together with Meta, Oracle, Nvidia, Microsoft, and Google – forcing many to ask workers to earn a living from home.
Paolo Napolitano, affiliate director at Dragonfly from Dow Jones, a geopolitical and safety danger agency based mostly in London, stated that cyber operations and affect campaigns are actually an integral a part of trendy warfare, and Iran in addition to Iran-linked actors made in depth use of those through the battle with the US and Israel.
The financial alternatives in nations like Saudi Arabia, Qatar and the UAE have lengthy attracted overseas companies searching for entry to profitable markets, capital and low taxes. Global expertise has flocked to the nations which have for many years been seen as islands of stability in a unstable area.
Iran’s marketing campaign takes goal at this rigorously cultivated picture, aiming to inflict reputational harm – even when the bodily harm is minimal.
“Iran was under no illusion that it would be able to defeat the US and Israeli militaries conventionally and so has probably for several years been preparing such methods for such a conflict.” Napolitano stated.
In Jordan, Iran-linked teams launched cyber assaults aimed toward manipulating the storage temperatures of wheat reserves to break strategic stockpiles in a rustic already struggling economically, Jordanian National Cybersecurity Center reported in early March.
After studies emerged that Iran was hacking into CCTV cameras and residential safety cameras, officers asked residents to alter their passwords.
“Iranian hackers have been trying to access surveillance footage from cameras in Israel and the Gulf countries since the start of the war,” stated Seyoung Jeon, lead cyber analyst at Dragonfly. “This seems to be to support its air strikes, by helping them to more accurately identify target locations or to assess damage from missile strikes.”
Hundreds of miles away from the Persian Gulf, Israelis acquired ominous messages on their telephones too.
“Thousands of Palestinian children died because of you. You and your family are a target for us. Wait for death,” one message in Hebrew despatched to Israeli telephones learn, signed by the Revolutionary Guards.
Controlling the movement of knowledge
For weeks forward of the war, Tehran warned that any strike on its soil would set off retaliation against Washington’s regional allies. As hypothesis about an imminent assault intensified following the deployment of US warships to the area, a pro-Iran X account known as “Iran Military Media” – typically mistaken for the navy’s official account – posted a picture of Dubai’s Burj Khalifa, the world’s tallest tower, with no caption. The veiled risk to the town left many residents involved.
In the hours after the primary US-Israeli strikes on Tehran on February 28, Iran made good on its threats.
Hundreds of projectiles had been fired at cities that had been generally known as a few of the world’s most secure, in what a senior UAE official, Anwar Gargash, described as “the worst-case scenario.” Even because the assaults focused US bases, the Revolutionary Guards struck civilian targets together with accommodations in Dubai, residential high-rises in Bahrain, gasoline services in Qatar, and airports in Kuwait.
As info and disinformation unfold concerning the extent of the harm brought on by Iran’s strikes, Gulf Arab governments rushed to regulate the narrative. Dozens of individuals had been arrested within the UAE for filming interceptions or sharing movies deemed inappropriate.
In Kuwait, Ahmed Shihab-Eldin, a distinguished Kuwaiti-American journalist was detained after sharing movies associated to the Iran war and in Qatar greater than 300 folks had been arrested for “photographing, sharing and publishing misleading information.”
In the next days, the tactic seemed to be working. Residents started self-censoring in non-public chats and deleting posts out of concern of reprisal. Even journalists working for some Western information shops within the area started taking precautions, avoiding bylines on information tales and pictures.
Rise in cyberattacks
Iran-linked hackers have struck targets far past the attain of its missiles, inflicting disruptions at a number of US oil, gasoline and water websites in latest weeks, according to a US advisory and three sources aware of the investigation. The hacks have triggered some industrial processes on the websites to close down, forcing them to function manually, the sources stated.
Tehran-linked hackers final month leaked emails stolen from the non-public account of FBI Director Kash Patel. Before that, they disrupted enterprise for a serious US medical system maker.
The identical hackers claimed accountability for breaching the non-public gadgets and accounts of former Israel navy Chief of Staff Herzi Halevi. The group launched dozens of pictures and identification paperwork as proof of the breach.
The cyber exercise typically has a psychological part. Iranian hackers boasted on-line of the hacks against Patel and the medical system maker whereas exaggerating their impression.
Still, specialists say that Iran’s blocking of overseas web companies at dwelling has additionally restricted the depth of cyber assaults throughout the area.
“We are seeing geopolitical tensions spill into cyberspace in more organized, sustained, strategic, and publicized ways than ever before,” Andy Piazza, senior director of risk intelligence at Unit 42 in Palo Alto Networks advised NCS.
But whereas the Islamic Republic has a “proven capability for highly sophisticated, multi-pronged cyber campaigns,” preliminary cyber exercise was “significantly hindered because domestic internet connectivity dropped to between one and four percent following the initial conflict,” Piazza added.
The effectiveness of Iran’s uneven campaigns is troublesome to find out however a key goal was positively achieved, Napolitano stated.
“The primary aim of these campaigns is to diffuse fear and amplify uncertainty in the Gulf, thereby demonstrating that local authorities are unable to address threats coming from Iran,” he added.
The-NCS-Wire
™ & © 2026 Cable News Network, Inc., a Warner Bros. Discovery Company. All rights reserved.