According to the latest update from Unit 42, since February 28, 2026, Iran has maintained internet disruptions at nearly 100% for 27 consecutive days in response to joint military strikes by the United States and Israel. This situation has increased the likelihood of wiper attacks as Iran has a history since 2012 of conducting destructive attacks against priority targets.
Researchers have identified 7,381 phishing URLs related to the conflict, coming from 1,881 unique names. These tactics have spread into business and consumer sectors, mimicking trusted entities such as telecom providers, national airlines, and government institutions.
Additionally, the research shows an increase in financial fraud and credential theft with scams targeting donations and cryptocurrencies based on current geopolitical events.