Cybersecurity experts are warning of an increasingly sophisticated wave of cyber operations linked to Iran, driven by artificial intelligence tools and years of accumulated personal data. Analysts say the evolution of these tactics is making attacks more precise, scalable and potentially disruptive to governments, corporations and critical infrastructure worldwide.

According to Israeli cyber policy specialists, networks associated with the Islamic Revolutionary Guard Corps (IRGC) and affiliated actors have shifted from broad phishing campaigns to highly targeted, AI-enhanced spear-phishing operations.

AI Boosts Precision in Spear-Phishing Campaigns

Early Iranian cyber efforts relied largely on mass email phishing attempts. Over time, however, threat actors have reportedly gathered extensive personal data through fraudulent websites, manipulated social media profiles and coordinated email campaigns.

That data is now being leveraged to craft targeted spear-phishing messages designed to impersonate trusted officials, institutions or corporate entities.

In 2024, suspected Iranian operatives attempted to impersonate representatives of the Israel Defense Forces (IDF) while targeting a former Israeli government spokesperson. Analysts say the attempt failed due to translation errors and technical inconsistencies. However, experts caution that AI-powered language models and deepfake technologies have significantly reduced such weaknesses, enabling attackers to produce more convincing emails, voice recordings and video content.

Security researchers warn that generative AI tools can now rapidly adapt tone, language and contextual details to specific victims — increasing the likelihood of successful compromise.

Trojanized Apps and Remote Surveillance Tactics

In one recent incident, cybersecurity monitoring firms identified a trojanized version of Israel’s Home Front Command mobile application circulating online. If installed, the malicious app could have granted attackers ongoing access to SMS messages, contact lists and GPS location data.

Other operations have involved counterfeit Google Meet invitations designed to activate victims’ cameras and microphones for remote surveillance.

Such tactics reflect a broader trend of blending social engineering with technical exploitation, creating layered attack chains that are difficult to detect early.

Post-October 7 Surge in Infrastructure Targeting

Cyber analysts report a marked increase in activity since the events of October 7. Initial phishing emails are often used as entry points into broader digital ecosystems, including industrial control systems connected to water utilities, power grids and transportation networks.

Attempts to infiltrate Israeli water infrastructure and networks associated with U.S.-based technology companies have been identified, according to multiple security assessments.

Countries in the Gulf region have also reported a rise in AI-enabled cyber incidents. Officials in several states credit coordinated monitoring platforms and intelligence-sharing mechanisms for helping neutralize threats before significant damage occurred.

Some experts suggest that regional cybersecurity cooperation frameworks strengthened after the Abraham Accords have improved collective defensive capabilities.

Disinformation and Psychological Operations

Alongside state-linked cyber activity, self-styled “hacktivist” groups such as Team 313 have claimed responsibility for various digital intrusions.

Analysts believe these groups are also engaged in psychological operations and coordinated disinformation campaigns aimed at amplifying political tensions and social polarization.

Security policy experts warn that while many countries have strengthened technical defenses, countering AI-generated misinformation remains a significant challenge. The growing availability of low-cost AI tools enables the rapid production of manipulated videos, synthetic audio clips and fabricated news content capable of eroding public trust.

Rising Hybrid Threats

Experts caution that the convergence of cyber and physical tactics represents an emerging frontier in hybrid warfare. Lessons from the Russia-Ukraine conflict have heightened awareness of how cyberattacks can complement conventional military operations.

However, preparedness levels vary widely across sectors and regions.

As AI-driven cyber capabilities mature, analysts expect increasing pressure on global security frameworks. Governments and private organizations may need to invest more heavily in AI-based defensive systems, cross-border intelligence sharing and resilience planning to counter increasingly adaptive threat actors.

The warning from cybersecurity specialists is clear: artificial intelligence is not only transforming innovation and commerce — it is reshaping the battlefield of digital conflict.

India faces a critical juncture in the global technology landscape, with the Economic Survey 2025–26 warning that the nation must rapidly transition from an IT services hub to a leading player in the artificial intelligence (AI) ecosystem. The report emphasizes that AI and computing power will define economic and geopolitical influence in the 21st century, much like oil and steel shaped the 20th century.

The Survey highlights “compute”—encompassing high-performance processors, graphics chips, energy systems, and essential minerals—as the new driver of global economic hierarchies. Control over these technological assets is becoming a decisive factor in international alliances, trade patterns, and strategic leverage.

Against the backdrop of rising US-China tech competition, the Survey stresses that resilience alone will not secure India’s position. Instead, it advocates for “strategic indispensability,” where India becomes an essential part of global value chains, making it difficult to bypass or replace. The report notes that initiatives such as US-led efforts to create a trusted AI ecosystem are reshaping global capital flows and technological leadership, with implications for emerging economies.

The Survey identifies two primary models shaping the AI race. Western nations rely on top-down strategies driven by large technology firms, concentrated intellectual property, and massive private investment. While powerful, this approach is capital-intensive and increasingly closed. By contrast, a bottom-up strategy—focused on distributed innovation, sector-specific applications, public digital infrastructure, and strong state coordination—is emerging across many other nations.

For India, the Survey recommends a bottom-up model tailored to the country’s strengths. Priorities should include applied AI in healthcare, agriculture, education, finance, logistics, and governance. Leveraging open-source tools, public datasets, and domestic innovation ecosystems can help India build practical AI solutions without depending solely on proprietary models.

The Survey underscores India’s competitive advantages: a large pool of highly skilled technical talent, substantial contributions to AI research, and one of the most AI-literate workforces globally. Additionally, India possesses vast, diverse domestic datasets spanning languages, geographies, and socio-economic groups, offering opportunities for high-impact applications in health, agriculture, urban planning, climate resilience, and public services.

However, the Survey cautions that without coordinated policy action, investment in computing infrastructure, secure access to critical minerals, and strong frameworks for data governance and innovation, India risks remaining dependent on foreign technology. “The window is narrow,” it notes, warning that delayed action could permanently limit the country’s technological sovereignty.