Iran — Cyber Threat Profile
Iran's cyber doctrine blends strict domestic control with asymmetric operations abroad. Critical events, including the 2010 Stuxnet attack,prompted Tehran to build significant cyber capabilities. Iran now invests heavily in offensive operations, often through the IRGC's cyber units and the passive defense organization. Experts note Iran as "one of the five most active states" in cyberspace, with operations spanning espionage to disruptive attacks. Iran primarily targets regional rivals (energy firms in the Gulf, Israeli infrastructure) via APT groups (e.g. APT33/34/35) and proxies (Hacktivist cells). Domestically, Iran enforces extensive internet censorship and surveillance.- National CERT/CSIRT: Iran National CERT Coordination Center (MAHER)
- World Cybercrime Index 2024 (origin significance): 4.78 / 100, #11 worldwide
- Secure Internet servers per 1M people (2024): 7,225.7 (source: World Bank)
- Internet users (2024): 85.3% of population (source: World Bank)
Read the full analysis on IntelFusions