Iranian Cyber Operations: 2026 Threat Assessment (infosecurity-magazine.com)

• Strategic use of ransomware for state-aligned objectives
• Geopolitical targeting of US and Gulf-state infrastructure
• Increased reliance on 'deniable' hacktivist personas

"Google's Head of Threat Intelligence warns of intensified Iranian cyber activity targeting the US and Gulf allies. The strategy employs ransomware and hacktivist proxies to maintain plausible deniability while conducting aggressive operations. This signals a shift in how regional powers use digital tools to exert geopolitical pressure without triggering direct conventional conflict."