Iran Turns to proxies,Cyberattacks after Israeli Strikes

⁣ Updated June 22,2025

Recent Israeli air⁤ strikes‍ have largely ⁣targeted ⁢Iran’s military and nuclear capabilities. In a matter of days, Israel has reportedly damaged or destroyed at least two nuclear sites, decimated air defenses in several cities, and killed nuclear scientists and senior leaders of the Islamic Revolutionary Guard Corps.

While these⁤ operations have ⁤compromised⁤ Iran’s ability to wage conventional warfare, Tehran possesses other⁤ means to strike its ⁤enemies.Despite the ⁣degradation of ⁢its military, Iran can still leverage ‍proxies, criminal organizations, and cyberattacks to target Israeli and U.S. interests, according to a researcher who studies Iran’s partnerships with militant groups.

This approach aligns with Iran’s “forward deterrence” doctrine, which emphasizes targeting adversaries before they reach Iran’s borders. As Supreme Leader Ali Khamenei said in ⁤2019, Iran must confront threats beyond its own walls.

This doctrine emerged after the 1979 revolution, driven by the need to cultivate proxies against Saddam hussein during the Iran-Iraq War in the 1980s. Iran⁤ formed groups like the⁣ Badr Organization to fight Hussein, and continues to support the militia ⁢to this day.

More recently, Iran has cultivated violent non-state actors, including terrorist and rebel groups, as ‍well as criminal gangs, to target adversaries such as the U.S., Israel, and⁤ Saudi Arabia. ⁤These groups are ‍primarily coordinated ⁣through the Revolutionary Guard’s Quds Force,founded in 1988.

While Hezbollah‘s capabilities have been hampered by⁤ Israeli efforts, the Houthis in Yemen remain a potent force. In June, the Houthis launched missiles against Israel in response to attacks on Iran.The Houthis ⁣also have the ability to disrupt shipping in the Red Sea and Strait of Hormuz, crucial waterways for global trade. Houthi attacks on commercial ships in the Red Sea have driven ⁣up shipping‍ costs, leading to naval escorts and U.S.-led bombings.

Iran also maintains ⁢alliances with smaller⁢ proxies in Iraq and Syria, which ⁣could be deployed against U.S. diplomatic and military targets. One such ⁢group was behind the deadly bombing of a U.S. military base in Jordan in⁤ January 2024, which killed three U.S. soldiers.

Iran’s Cyberwarfare Options

Another ⁤avenue for Iranian retaliation⁢ is cyberwarfare, conducted either directly or through proxy groups. Cybersecurity firm ‍Radware reported a⁣ spike in malicious online ⁤activity following the recent Israeli operation, attributing it to iranian state actors and pro-Iranian hacker groups.

cyber operations are embedded in ⁤Iran’s⁤ forward ⁣deterrence doctrine. Tehran has built a network of hacking groups to conduct reconnaissance, disinformation, data theft, sabotage, ⁣and influence operations. Iran is also integrating AI tools into its cyber⁣ arsenal, making operations more agile and effective. After the Oct. 7,2023,attack by Hamas,Iranian-backed cyber actors used AI tools to generate propaganda imagery aimed at influencing Israeli public sentiment.

Following Iran’s April 2024 drone strike on Israel, Iranian-backed cyber actors employed AI to create fabricated video clips and images falsely depicting rockets and explosions, shared via platforms like X to amplify fear among Israelis.

A New Dimension in the Conflict

As conventional⁣ warfare between Israel and Iran continues to degrade Tehran’s military capabilities, the risk of asymmetric retaliation grows. Iran’s network of operatives, proxies, and cyber actors may be harder to hit than stationary ‍launching sites and ‍military headquarters. they remain active and capable, even amid military degradation and leadership⁢ losses.

The more Tehran is pressured ⁤through direct strikes, the more likely it is to turn to these unconventional warfare tools. Although less visible, Iran’s unconventional⁢ warfare arsenal is a possibly ⁣risky dimension of this conflict.