Iranian Cyber Operations Escalate Against US Critical Infrastructure as War Enters Second Month

Tehran-linked hackers are intensifying digital reconnaissance and preparing disruptive attacks against US critical infrastructure. The "Electronic Operations Room" established February 28 coordinates multiple state-aligned personas. Iran-linked group Handala claimed a March 11 attack on medical device maker Stryker Corp that disrupted manufacturing and shipping. Unit 42 and KELA warn that healthcare, technology, and supply chain companies face the highest risk from phishing, ransomware, and DDoS campaigns.