IC Technology — 2026-06-20

FBI and IC Officials Warn Iranian Cyber Operations Will Persist After Peace Deal

BLUFIranian cyber operations against U.S. networks are very likely to continue through the six-month post-deal window, as the memorandum contains no cyber provisions and loosely affiliated groups face no constraints at all.

Five current and two former U.S. officials told Nextgov/FCW that the preliminary U.S.-Iran memorandum reached Sunday is unlikely to halt Iranian and Iran-aligned cyber operations against American networks 12. The agreement, aimed at freezing nearly four months of fighting ahead of a formal Geneva signing, contains no cyber-specific provisions and leaves major regional disputes unresolved 2. Meredith Burkart, the FBI's former chief of cyber policy, said she would expect Iranian targeting to continue unless the final deal includes a cyber-specific component or there has been a material change in Tehran's cyber workforce 12. One former official told Nextgov/FCW that pro-Iran hacking collectives not under full regime command could use cyberattacks to signal displeasure if they oppose the final terms 2.

Analysis
Iranian or Iran-aligned cyber operations against U.S. networks are likely to be publicly attributed within 90 days of the formal Geneva signing. Over the six-month window, at least one significant offensive operation targeting U.S. government or critical infrastructure networks is very likely, given that Tehran has sustained such operations through every prior nuclear diplomacy phase without interruption. Moderate confidence on the longer window reflects unbroken base-rate history, though attribution-suppression incentives during active negotiations could delay public disclosure without halting operations. Low confidence on the 90-day window reflects single-outlet sourcing and the opacity of whether undisclosed back-channel commitments constrain the apparatus in ways the public memorandum does not reflect. The loosely affiliated hacktivist layer carries the highest near-term risk, as groups operating outside direct IRGC command could use infrastructure targeting to signal displeasure with final terms.

3 sources

Peace deal unlikely to stem Iran hackers, US officials say - Defense One
US officials see Iran cyber threat persisting despite preliminary deal - Nextgov/FCW
US officials see Iran cyber threat persisting despite preliminary deal - Route Fifty