Iran's cyber attack strategy is 'perfect weapon' against US

Recent reports suggest Iran has ramped up cyber attacks on the United States, with experts warning that hacking provides a "perfect weapon" for Iran's geopolitical position. Morey Haber, chief security adviser at BeyondTrust, noted that cyber attacks are an "asymmetric weapon" suited to Iran's needs and require expertise. Sanctions make hacking a logical choice for Iran, as it can have a significant impact without the need for physical presence or equipment on American soil.

While Iranian attacks are not particularly sophisticated technically, they succeed due to poor cybersecurity hygiene, such as outdated systems, weak passwords, and internet-connected devices left unsecured. Yiyi Miao, chief product officer at OPSWAT, cautioned that even minor hacks can cause real disruption in critical infrastructure, such as water and energy systems.

In July, US water systems were reportedly hacked, possibly by Iran, despite President Trump attributing the issue to "incompetence" of state officials. In March, Handala, a group linked to Iran, claimed responsibility for hacking the FBI director's email and cloud services. More recently, Handala claimed credit for a breach in California's water systems, later stating they did not cut off the water supply, attributing the disruption to "lack of technical knowledge."

Cyber attacks between Iran and the US have been ongoing since the 2025 digital defense report from Microsoft, which showed Iran frequently targeted Israel, the US, the UAE, and India. US officials have warned that Iran is increasing its cyber efforts against US computer systems, with cyber director Sean Cairncross describing Iran as a "perpetual bad actor" who never stops trying to infiltrate digital infrastructure.