{"id":22985,"date":"2017-12-12T15:48:20","date_gmt":"2017-12-12T15:48:20","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/"},"modified":"2026-08-08T18:19:26","modified_gmt":"2026-08-08T18:19:26","slug":"following-the-developing-iranian-cyberthreat","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/","title":{"rendered":"Following the developing Iranian cyberthreat"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Iran is one of the leading cyberspace adversaries of the United States. It emerged as a cyberthreat a few years later than <a href=\"https:\/\/theconversation.com\/tracing-the-sources-of-todays-russian-cyberthreat-81593\" title=\"\">Russia <\/a>and <a href=\"https:\/\/theconversation.com\/how-the-chinese-cyberthreat-has-evolved-82469\" title=\"\" class=\"\">China <\/a>and has so far demonstrated less skill. Nevertheless, it has conducted several highly damaging cyberattacks and become a major threat that <a href=\"https:\/\/www.wired.com\/story\/apt-34-iranian-hackers-critical-infrastructure-companies\/\" class=\"selected-link\" target=\"_blank\" title=\"\">will only get worse<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers. But unlike these other countries, Iran openly encourages its hackers to launch cyberattacks against its enemies. The government not only recruits hackers into its cyberforces but supports their independent operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Putting Iranian hackers on the map<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It was clear by the mid-2000s that Iran would become a source of cyberattacks: Its hackers had started taking over websites worldwide and posting their own messages on them, a practice called \u201cdefacing.\u201d Often it was just for fun, but some hackers wanted to stand up for their country and Muslims. One prominent group, Iran Hackers Sabotage, launched in 2004 \u201cwith the aim of showing the world that Iranian hackers have something to say in the worldwide security.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The group\u2019s website announced that it provided vulnerability testing and secure hosting services, but it was also known for web defacements. In 2005, the group replaced the <a href=\"http:\/\/www.zone-h.org\/mirror\/id\/2645159\" class=\"\" data-original-title=\"\" title=\"\">U.S. Naval Station Guantanamo<\/a> home page with one defending Muslims and condemning terrorists. Another of its defacements proclaimed \u201c<a href=\"http:\/\/www.zone-h.org\/mirror\/id\/2917409\" data-original-title=\"\" title=\"\">Atomic energy is our right<\/a>.\u201d By early 2008, the <a href=\"http:\/\/www.zone-h.org\/\" data-original-title=\"\" title=\"\">Zone-H<\/a> defacement archive listed 3,763 web defacements for the group. The group has since disbanded.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Another prominent group, Ashiyane Digital Security Team, ran a website that offered free hacking tools and tutorials. The site claimed to have 11,503 members in May 2006. Like Iran Hackers Sabotage, Ashiyane provided security services while using its members\u2019 knowledge and skills to deface websites. Their defacements frequently included a map of Iran with a reminder that \u201cThe correct name is Persian Gulf\u201d for what some <a href=\"https:\/\/en.wikipedia.org\/wiki\/Persian_Gulf_naming_dispute#Viewpoint_of_Arabs\" class=\"\" data-original-title=\"\" title=\"\">Arab states have called<\/a> the \u201cArabian Gulf.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ashiyane defaced 500 websites in 2009 during the Israeli incursion into Gaza and <a href=\"https:\/\/www.memri.org\/reports\/irans-cyber-war-hackers-service-regime-irgc-claims-iran-can-hack-enemys-advanced-weapons\" data-original-title=\"\" title=\"\">1,000 sites<\/a> in the U.S., U.K. and France in 2010 for supporting what the group said were anti-Iranian terrorist groups. By May 2011, Zone-H had recorded 23,532 defacements by the group. Its leader, Behrouz Kamalian, said his group <a href=\"https:\/\/www.memri.org\/reports\/irans-cyber-war-hackers-service-regime-irgc-claims-iran-can-hack-enemys-advanced-weapons\" class=\"\" data-original-title=\"\" title=\"\">cooperated with the Iranian military<\/a>, but operated independently and spontaneously.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A third group, the Iranian Cyber Army, launched a few years later. It has been implicated in <a href=\"https:\/\/www.memri.org\/reports\/irans-cyber-war-hackers-service-regime-irgc-claims-iran-can-hack-enemys-advanced-weapons\">several website attacks<\/a>, including one against Twitter in 2009 that proclaimed support for Iran\u2019s Supreme Leader Ali Khamenei. Other attack targets were the <a href=\"https:\/\/arstechnica.com\/tech-policy\/2011\/02\/iranian-cyber-army-attacks-voice-of-america-website\/\">Voice of America in 2011<\/a> after the U.S. supported Iran\u2019s Green movement, and regime opposition websites in 2013 just before the presidential election.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Iran\u2019s cyber military<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Iranian Cyber Army is <a href=\"https:\/\/web.archive.org\/web\/20130606084937\/https:\/\/www.csis.org\/blog\/iranian-cyber-army\" class=\"\" data-original-title=\"\" title=\"\">said by some cybersecurity researchers<\/a> to operate on behalf of Iran\u2019s <a href=\"https:\/\/en.wikipedia.org\/wiki\/Islamic_Revolutionary_Guard_Corps\">Islamic Revolutionary Guard Corps<\/a>, a branch of the country\u2019s military. The Revolutionary Guards runs a <a href=\"http:\/\/www.inss.org.il\/publication\/iran-and-cyberspace-warfare\/?offset=50&amp;posts=74&amp;outher=Gabi%20Siboni\">cyber warfare program<\/a> that in 2008 was estimated to employ about 2,400 professionals. In addition, it connects with independent hacker groups such as Ashiyane and the ICA.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Revolutionary Guards also command Iran\u2019s voluntary paramilitary militia, known as the Basij Resistance Force. In 2010, the Basij established the Basij Cyber Council, but it focuses more on <a href=\"http:\/\/www.inss.org.il\/publication\/iran-and-cyberspace-warfare\/?offset=50&amp;posts=74&amp;outher=Gabi%20Siboni\" class=\"\" target=\"_blank\" data-original-title=\"\" title=\"\">media and influence operations<\/a> than on cyberattacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Turning to sabotage<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By 2012, Iranian cyberattacks had gone beyond simple web defacements and hijacks to ones that destroyed data and shut down access to critical websites. The attackers conceal their government connections by hiding behind monikers that resemble those used by independent <a href=\"https:\/\/www.georgetownjournalofinternationalaffairs.org\/online-edition\/the-rise-of-hacktivism?rq=denning\">hacktivists <\/a>fighting for justice and human rights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One such group called itself the Cutting Sword of Justice. In 2012, it launched <a href=\"http:\/\/www.nytimes.com\/2012\/10\/24\/business\/global\/cyberattack-on-saudi-oil-firm-disquiets-us.html?pagewanted=all&amp;_r=1\">cyberattacks against the Saudi Aramco oil company<\/a>, claiming to protest Saudi oppression and corruption financed by oil. The attacks used \u201cwiper\u201d code that overwrote data on hard drives and spread through the company\u2019s network via a virus dubbed Shamoon. <a href=\"http:\/\/money.cnn.com\/2015\/08\/05\/technology\/aramco-hack\/index.html\">More than 30,000 computers<\/a> were rendered inoperable at Saudi Aramco and Qatar\u2019s RasGas, which was also targeted. U.S. intelligence officials <a href=\"http:\/\/www.nytimes.com\/2012\/10\/24\/business\/global\/cyberattack-on-saudi-oil-firm-disquiets-us.html\">blamed Iran<\/a> for the attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iran has deployed wiper malware in other acts of sabotage, most notably the 2014 <a href=\"https:\/\/thehackernews.com\/2014\/12\/las-vegas-casino-hacked.html\">attack against the Las Vegas Sands Corporation<\/a>. The attack was thought to be a response to remarks made by Sheldon Adelson, the company\u2019s largest shareholder. Adelson suggested setting off a bomb in an Iranian desert to persuade the country to abandon nuclear weapons. And in 2016, the <a href=\"https:\/\/www.theregister.co.uk\/2016\/12\/02\/accused_iranian_disk_wiper_returns_to_destroy_saudi_orgs_agencies\/\" class=\"\" data-original-title=\"\" title=\"\">Shamoon malware resurfaced<\/a>, wiping data from thousands of computers in Saudi Arabia\u2019s civil aviation agency and other organizations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iranian hackers operating on behalf of the government have also conducted massive <a href=\"https:\/\/theconversation.com\/attackers-can-make-it-impossible-to-dial-911-67980\">distributed denial-of-service attacks<\/a>, which flood sites with so much traffic that they become inaccessible. From 2012 to 2013, a group calling itself the <a href=\"https:\/\/www.recordedfuture.com\/deconstructing-the-al-qassam-cyber-fighters-assault-on-us-banks\/\">Cyber Fighters of Izz ad-Din al-Qassam<\/a> launched a series of relentless distributed denial-of-service attacks against major U.S. banks. The attackers claimed the banks were \u201cproperties of American-Zionist Capitalists.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2016 the U.S. <a href=\"https:\/\/www.washingtonpost.com\/world\/national-security\/justice-department-to-unseal-indictment-against-hackers-linked-to-iranian-goverment\/2016\/03\/24\/9b3797d2-f17b-11e5-a61f-e9c95c06edca_story.html\">indicted seven Iranian hackers<\/a> in absentia for working on behalf of the Revolutionary Guards to conduct those bank attacks, which were said to have caused tens of millions of dollars in losses. The motivation may have been retaliation for economic sanctions that had been imposed on Iran or the <a href=\"http:\/\/www.mdpi.com\/1999-5903\/4\/3\/672\" class=\"\" data-original-title=\"\" title=\"\">Stuxnet <\/a>cyberattack on Iran\u2019s centrifuges.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One of the seven indictments was of a man who allegedly obtained access to the computer control system for the <a href=\"http:\/\/time.com\/4270728\/iran-cyber-attack-dam-fbi\/\">Bowman Avenue Dam<\/a> in New York state. The access would have allowed the intruder to \u201coperate and manipulate\u201d one of the dam\u2019s gates had it not been offline for maintenance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iran also engages in cyberespionage. One group, which cybersecurity research firm FireEye named <a href=\"https:\/\/www.wired.com\/story\/iran-hackers-apt33\/\">Advanced Persistent Threat 33<\/a>, has invaded computers around the world, with targets in the petrochemical, defense and aviation industries. The group uses code linked to Iran\u2019s wiper malware, possibly in preparation for more destructive attacks. Another group, called <a href=\"https:\/\/www.wired.com\/story\/apt-34-iranian-hackers-critical-infrastructure-companies\/\">Advanced Persistent Threat 34<\/a>, has been active since at least 2014, targeting companies in the financial, energy, telecom and chemical industries.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Foreign assistance<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iran may be beefing up its cyberwarfare capabilities with the help of foreigners.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to former Congressman Peter Hoekstra, who chaired the House\u2019s Permanent Select Committee on Intelligence, Iran\u2019s rapid emergence as a major cyberthreat likely stems from its <a href=\"http:\/\/freebeacon.com\/national-security\/iran-russia-partnering-to-launch-cyber-attacks\/\">close ties to Russia<\/a>. Matthew McInnis, a resident fellow at the American Enterprise Institute, believes Iran turned to Russia to <a href=\"http:\/\/freebeacon.com\/national-security\/iran-russia-partnering-to-launch-cyber-attacks\/\" class=\"\" data-original-title=\"\" title=\"\">level the cyberwarfare battlefield<\/a> with the U.S. and the West.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iran may also be <a href=\"http:\/\/www.inss.org.il\/publication\/iran-and-cyberspace-warfare\/\">looking to Mexico<\/a> for cyberwarfare support. According to a <a href=\"http:\/\/dailysignal.com\/\/2011\/12\/09\/univision-confirms-iranian-threat-in-latin-america\/\">documentary aired on the Univision<\/a> television network in 2011, a former Iranian ambassador to Mexico accepted a plan from undercover Mexican students to launch crippling cyberattacks against the U.S. The targets included the White House, the CIA, the FBI and nuclear installations. The documentary also shows Venezuelan and Cuban officials in Mexico expressing interest in the plot.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Strengthening its cyberwarfare program<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iran may view cyberwarfare as a means of overcoming its military disadvantage compared to the U.S. To that end, it will likely continue to improve its cyber capabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Containing Iran\u2019s cyberwarfare program would likely be even more challenging than containing its <a href=\"https:\/\/theconversation.com\/iran-nuclear-deal-how-to-ensure-compliance-53485\">nuclear program<\/a>. Computer code is easy to conceal, copy and distribute, making it extremely <a href=\"http:\/\/faculty.nps.edu\/dedennin\/publications\/Berlin.pdf\">difficult to enforce controls placed on cyberweapons<\/a>. That leaves <a href=\"https:\/\/theconversation.com\/how-companies-can-stay-ahead-of-the-cybersecurity-curve-74414\" class=\"\" data-original-title=\"\" title=\"\">cybersecurity <\/a>and <a href=\"https:\/\/theconversation.com\/cybersecuritys-next-phase-cyber-deterrence-67090\">cyberdeterrence <\/a>as America\u2019s best options for defending against the Iranian cyberthreat.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><i><a href=\"http:\/\/theconversation.com\/following-the-developing-iranian-cyberthreat-85162\" class=\"\" target=\"_blank\">This article was originally published on The Conversation. <\/a><\/i><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.<\/p>\n","protected":false},"author":7,"featured_media":69492,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10],"tags":[],"coauthors":[7442],"class_list":["post-22985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber"],"acf":{"subheadline":"","legacy_arc_id":"7ZSLTZZUGZE5ZEN4WV6X4NH3UY","arc_canonical_url":"\/international\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Following the developing Iranian cyberthreat - C4ISRNet<\/title>\n<meta name=\"description\" content=\"Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Following the developing Iranian cyberthreat\" \/>\n<meta property=\"og:description\" content=\"Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2017-12-12T15:48:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:19:26+00:00\" \/>\n<meta name=\"author\" content=\"Dorothy Denning, Naval Postgraduate School\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dorothy Denning, Naval Postgraduate School\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Following the developing Iranian cyberthreat\",\n\t            \"datePublished\": \"2017-12-12T15:48:20+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:19:26+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/\"\n\t            },\n\t            \"wordCount\": 1226,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/baidu_redirected.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Cyber\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/\",\n\t            \"name\": \"Following the developing Iranian cyberthreat - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/baidu_redirected.jpg.jpg\",\n\t            \"datePublished\": \"2017-12-12T15:48:20+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:19:26+00:00\",\n\t            \"description\": \"Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/baidu_redirected.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/baidu_redirected.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2017\\\/12\\\/12\\\/following-the-developing-iranian-cyberthreat\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Cyber\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t                    \"ad_zone\": \"cyber\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Following the developing Iranian cyberthreat\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Following the developing Iranian cyberthreat - C4ISRNet","description":"Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Following the developing Iranian cyberthreat","og_description":"Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/","og_site_name":"C4ISRNet","article_published_time":"2017-12-12T15:48:20+00:00","article_modified_time":"2026-08-08T18:19:26+00:00","author":"Dorothy Denning, Naval Postgraduate School","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Dorothy Denning, Naval Postgraduate School","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Following the developing Iranian cyberthreat","datePublished":"2017-12-12T15:48:20+00:00","dateModified":"2026-08-08T18:19:26+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/"},"wordCount":1226,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/baidu_redirected.jpg.jpg","articleSection":["Cyber"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/","name":"Following the developing Iranian cyberthreat - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/baidu_redirected.jpg.jpg","datePublished":"2017-12-12T15:48:20+00:00","dateModified":"2026-08-08T18:19:26+00:00","description":"Like Russia and China, the history of Iran\u2019s cyberspace operations begins with its hackers.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/baidu_redirected.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/baidu_redirected.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2017\/12\/12\/following-the-developing-iranian-cyberthreat\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"Following the developing Iranian cyberthreat"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/baidu_redirected.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/22985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=22985"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/22985\/revisions"}],"predecessor-version":[{"id":22995,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/22985\/revisions\/22995"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=22985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=22985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=22985"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=22985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}