Iran Suffers Largest Cyberattack in History Amid US-Iran Airstrikes

— Modern Warfare, Cyber Warfare Takes the Lead
February 28th, along with the launch of the "Epic Fury" and "Lion's Roar" operations by the US military and the Israeli Defense Forces against Iran, Iran experienced its largest and most destructive coordinated cyberattack in history. This cyber operation was not merely an adjunct to military strikes but served as the "initial attack" and a critical component of the overall combat strategy, aiming to paralyze Iran's "digital nervous system" and create a one-way transparent battlefield for subsequent physical strikes.
This cyberattack exhibited unprecedented complexity and destructive power, mainly manifested as a "triple strike": First, nationwide disconnection and infrastructure paralysis. According to global internet monitoring organization NetBlocks, after the attack, Iran's internet connectivity plummeted to 4% of normal levels, almost completely disconnected from the global internet. Second, multi-dimensional hybrid attacks. The operation combined electronic warfare, distributed denial-of-service (DDoS) attacks, and deep intrusions into data systems related to Iran's energy and aviation infrastructure, with the latter particularly aimed at creating systemic chaos while kinetic strikes were underway. Third, long-term infiltration and targeted pre-positioning. The operation is believed to have culminated from a series of cyberattacks starting in January, with previous hacker assaults on Iran's government satellite broadcasts likely serving as reconnaissance and tactical testing for this large-scale operation.
The goal of this cyberattack was to achieve the strategic aim of decapitating Iran's "nerve center," with target selection demonstrating strong tactical and strategic focus, aiming for effects of "blinding," "muzzling," and "paralyzing." The main targets included: First, command, control, and propaganda systems. Western intelligence agencies confirmed that the primary objective was to disrupt Iran's Islamic Revolutionary Guard Corps' communication infrastructure, preventing coordinated counterattacks and impairing Iran's ability to deploy drones and ballistic missiles from its cyber and electronic forces. Additionally, the Iran Islamic Republic News Agency (IRNA) website was inaccessible for an extended period, and Tasnim News Agency, closely linked to the IRGC, also suffered severe disruptions and hacking attacks, with disinformation targeting Iran's Supreme Leader Ali Khamenei appearing on their sites—this was not only technical sabotage but also psychological warfare. Second, national governance and civilian basic services. Major cities like Tehran, Isfahan, and Shiraz experienced widespread failures in local applications and government digital services. Third, Iran's national internet. Iran's long-prepared "national internet," designed to isolate it from external networks, was also compromised during this joint offensive, failing to serve as a backup, leaving Iran's leadership cut off from both internal and external communications during the crisis.
This large-scale cyber operation exemplifies a clear multi-domain joint combat approach, with strategic objectives including: First, operational support, i.e., "soft kill" of Iran's IRGC communication networks to prevent effective counterattacks during the initial airstrikes, reducing the operational risk to US and Israeli pilots. Second, strategic isolation, i.e., cutting off Iran's network connections to control battlefield imagery and government statements, thereby dominating global public opinion. Third, psychological warfare and cognitive manipulation, i.e., directly transmitting anti-regime messages to the Iranian public through tampering with official media, attempting to amplify public panic, undermine regime legitimacy, and open a "cognitive battlefield" outside the traditional combat zone.
The unprecedented scale of this cyberattack achieved notable results: First, tactical success, effectively supporting the airstrike operations and achieving a "decapitation" of Iran's command chain. Second, strategic deterrence, demonstrating to the world that the US-Israel alliance possesses the capability to launch attacks of equal intensity in cyberspace and physical warfare, known as "firing the first shot in the cyber battlefield." Third, political isolation, causing Iran to fall into information blackout before organizing a counterattack, severely weakening its external voice channels. This cyberattack targeting Iran is a typical example of modern warfare, marking the complete blurring of boundaries between cyberspace and traditional battlefield space. Cyber weapons are no longer just tools for intelligence gathering but have evolved into "pathfinders" capable of strategic paralysis.
Israel and the US coordinated actions, launching airstrikes against Iran on February 28th, targeting multiple sites, with explosions reported in Tehran and other cities. Meanwhile, Israeli officials confirmed they took preemptive action aimed at eliminating the imminent threat posed by Iran's missile and military infrastructure. Israeli authorities stated that the "Lion's Roar" operation had been planned for months and was carried out in coordination with the US.
US President Donald Trump announced that the US had begun a "major combat operation," describing it as a defensive effort to prevent Iran from advancing its nuclear and long-range missile programs. In a video speech, Trump said, "Our goal is to defend the American people by eliminating the imminent threat of the Iranian regime." He also added that the US would ensure Iran would not acquire nuclear weapons.
The US Department of Defense named its Iran operation "Operation Epic Fury" and posted this name on social media. This was the first public statement from the US military since the start of the US-Israel joint strikes. Secretary of Defense Pete Hegseth reposted the statement in all caps, accompanied by an American flag.
While fighter jets and cruise missiles targeted the IRGC command centers, reports indicated that another front was paralyzing Iran from within. On February 28th, reports showed Iran was nearly completely engulfed in a "digital fog," seemingly a result of the large-scale cyberattack accompanying the joint US-Israel airstrikes.
According to Israeli media, Iran's critical infrastructure, official news websites, and secure communication systems were shut down, causing Iran's leadership to face communication breakdowns both domestically and internationally.