
Iran has reportedly repelled one of the most extensive and sophisticated cyberattacks ever launched against its national infrastructure. This revelation came from Behzad Akbari, head of the state-run Telecommunication Infrastructure Company (TIC), in an interview with Tasnim News Agency, affiliated with the Islamic Revolutionary Guard Corps.
Although the specific details of the incident remain undisclosed, Akbari stated that cybersecurity specialists swiftly identified the attack and implemented preemptive measures to mitigate any potential damage. As of the time of publication, TIC had not issued further comments regarding the nature of the cyberattack or its possible repercussions.
The incident occurred just one day after a powerful explosion rocked the commercial port of Shahid Rajaee, Iran’s largest maritime hub. According to local authorities, the tragedy claimed the lives of at least 28 people and injured approximately 800 others. The official cause of the explosion has not yet been determined, and no evidence has emerged linking it to the cyberattack on critical infrastructure.
Analysts at Ambrey Intelligence suggested that the explosion might have been triggered by mishandling of a shipment of solid fuel—intended for ballistic missiles—recently imported from China. However, Iran’s Ministry of Defense dismissed this theory, labeling it as baseless.
This unfolding situation comes amid ongoing negotiations between Iran and the United States regarding the Islamic Republic’s nuclear program—talks that have sparked global concern over the potential enrichment of uranium to weapons-grade levels.
This is not the first time Iran has grappled with major cyber offensives. In 2021, a cyberattack disrupted the nation’s fuel distribution system, and in 2022, one of its largest steel plants was targeted. A group calling itself Predatory Sparrow claimed responsibility for both attacks, asserting that they had been orchestrated to avoid civilian casualties.
While Predatory Sparrow presents itself as a dissident collective, the complexity of the operations—particularly the strike on the steel facility—has fueled speculation about possible backing from foreign intelligence services focused on minimizing collateral damage.
Tehran has long accused the United States and Israel of orchestrating cyberattacks on its infrastructure. Following the 2021 fuel system breach, Gholamreza Jalali, head of Iran’s Civil Defense Organization, claimed that “the Zionist regime, the Americans, and their agents” were behind the attack, though he offered no direct evidence.
In 2020, Jalali had also blamed the U.S. and Israel for a cyberattack on the Shahid Rajaee port infrastructure. Moreover, these two nations are widely believed to have been responsible for developing the Stuxnet worm—discovered in 2010—which was designed to sabotage Iran’s nuclear program.