Iranian state-linked hackers will launch war-themed credential theft campaigns against US, UK, and Israeli defense targets within 30 days
Iran's elevated intelligence collection requirements during active hostilities with the US and Israel make credential theft operations against defense and diplomatic targets near-certain to launch. Public attribution within 30 days is the main uncertainty, as campaigns may run covertly longer before vendor or government disclosure.
The US-Iran-Israel war drives cascading crises: new Israeli strikes on Lebanon trigger mass displacement, Gulf energy infrastructure sustains further damage pushing oil above $109, and Iranian cyber operators prepare retaliatory campaigns against Western defense targets — while the Pentagon's wartime AI adoption accelerates a structural shift in military doctrine.