Cybersecurity & Privacy — 2026-03-17

Iran Cyber Ecosystem Expands to 60+ Hacktivist Groups as Cybercrime Surges 245% During War

Palo Alto's Unit 42 documented Iran's cyber ecosystem expanding to over 60 hacktivist groups conducting operations during the war, with overall cybercrime surging 245% since hostilities began February 28. The ecosystem includes both state-directed groups and ideologically motivated actors. Stryker Medical was among the high-profile targets hit by Iranian hackers, disrupting healthcare supply chains.

Analysis
Tracks from prior INTSUM coverage of the Stryker Medical wiper attack via Handala/Void Manticore. The 245% cybercrime surge and expansion to 60+ groups indicates Iran's cyber response is scaling faster than its conventional military capability, which Janes confirms is degrading rapidly.

View in full brief →

UNCLASSIFIED // OPEN SOURCE