FRESH AIR

IN THE MEDIA

Israel and Iran: ‘Cyber winter is coming’

June 26, 2020 | Oved Lobel

Image: Atta Kenare/AFP/Getty Images
Image: Atta Kenare/AFP/Getty Images

The Strategist (ASPI) – 26 June 2020

A new front has opened in the increasingly intense cyber contest between Israel and Iran. On 24 April, a water facility in central Israel was hit by a cyberattack attributed to Iran’s Islamic Revolutionary Guard.

The head of Israel’s National Cyber Directorate, Yigal Unna, declared that this development would be remembered as ‘a point of change in the history of modern cyberwars’.

Two weeks later, Israel retaliated with a cyber strike that temporarily disrupted operations at a busy Iranian port.

The tit-for-tat cyber strikes between Iran and Israel may be a taste of future warfare. Attacks against infrastructure and industrial control systems look set to become more prominent as the cyber capacity of less advanced states grows.

At the time, Israel downplayed the incident, simply describing it as an attempted attack that was dealt with by the water authority and the National Cyber Directorate. It said that no harm had been done to the water supply and that systems continued to operate without interruption. Only on 7 May was the attack first attributed to Iran.

Subsequent reporting, citing anonymous foreign intelligence officials, indicated that the attack was routed through US and European servers and ‘targeted “programmable logic controllers” that operate valves for water distribution networks’. Iran was able to seize control of or alter operating systems and wipe data from at least six sites, and potentially from dozens, although it was unable to disrupt water supplies or waste management. The level of sophistication of the attack was described by one intelligence official as ‘miserable’.

However, an official cited by the Financial Times said later that the attack was more sophisticated than Israel initially thought. It was close to successful, and it wasn’t clear why it didn’t succeed. The aim of the attack may have been to increase the amount of chlorine added to the water, which could have triggered fail-safe measures that would have left thousands of farmers and householders without water during a heat wave and pandemic.

On 9 May, a high-level security cabinet meeting was held to discuss Israel’s response to the cyberattack. A report by Israel’s Channel 13 quoted one official as saying the attack ‘goes against all the codes of war’.

On the same day, a cyberattack which unnamed officials attributed to Israel took the Iranian Shahid Rajaee port offline, causing traffic disruptions and chaos for several days but no permanent damage. The New York Times reported that Iran’s outgoing defence minister, Naftali Bennett, decided that a response was needed to send a message once the Israeli media reported that Iran was responsible for the earlier attack on Israel. Bennett tied the attack directly to the Islamic Revolutionary Guard Corps. Israeli media reports suggested that Israel may have deliberately leaked its responsibility for the retaliatory attack to warn Iran and deter it from future attempts.

Since the massive Russian cyberattack on Ukraine’s electrical grid in 2016, such action against civilian infrastructure during war has gone from a theoretical fear to an unfortunate reality.

Iran has targeted infrastructure in the Gulf states, including Saudi Arabia’s Aramco oil company, Bahrain’s BapCo and Qatar’s RasGas, and continues to try to penetrate infrastructure in the United States. It even managed to hack an unsecured computer controlling a dam in New York in 2013. Iran is unlikely to be deterred from further attempts to do this in Israel, despite the Israeli retaliation against Shahid Rajaee and, the reports say, Israel’s vastly superior cyber warfare capabilities.

In January 2019, Israeli Prime Minister Benjamin Netanyahu said, ‘Iran attacks Israel on a daily basis. We monitor these attacks, we see these attacks and we foil these attacks all the time.’

Unna stressed that the latest attacks were aimed at causing physical damage through command and control systems. ‘This is the first time we have seen something like this, compared to attacks that target databases, which are also serious’, he said.

Iran’s cyberattacks are likely to continue, even though its cyber capability is not assessed as being particularly sophisticated. It reportedly relies mostly on ‘phishing’ and ‘password-spraying’ and on repurposing the more advanced tools of its adversaries.

Hacking for harassment and espionage purposes has been common for decades, but this trend of adversaries attempting to damage one another’s civilian infrastructure is likely to become an increasingly common aspect of declared and undeclared conflict. That’s on top of the terrorism potential of such cyberattacks on civilian infrastructure.

Unna said, ‘Cyber winter is coming and coming faster than even I suspected’. He said we need to stand together against such attacks, which will probably get more sophisticated and deadlier.

Oved Lobel is a policy analyst at the Australia/Israel & Jewish Affairs Council

Tags: , ,

RELATED ARTICLES

(image: Shutterstock/Svet Foto)

Military strikes alone won’t stop the Houthis without direct pressure on Iran

Mar 20, 2025 | Featured, Fresh AIR
Image: X

Pay-for-Slay is likely still Pay-for-Slay

Mar 7, 2025 | Fresh AIR
Image: X

The missing pieces of the Thai hostages story

Feb 21, 2025 | Fresh AIR
Damaged section of Kamal Adwan Hospital (image: World Health Organisation)

The latest IDF raid on the Kamal Adwan Hospital debunks absurd UN report

Jan 9, 2025 | Featured, Fresh AIR
Iran's Supreme Leader Ali Khamenei (left), the late Hezbollah Secretary-General Hassan Nasrallah and the late commander of the IRGC's Qods Force Qassem Soleimani

The Axis of Resistance is not dead yet

Dec 19, 2024 | Featured, Fresh AIR
Iranian women being ushered into a van by "Morality police" (Image: X)

Iranian human rights have significantly worsened since the “Woman, Life, Freedom” protests

Dec 18, 2024 | Featured, Fresh AIR
D11a774c 2a47 C987 F4ce 2d642e6d9c8d

Bibi in DC, the Houthi threat and the politicised ICJ opinion

Jul 26, 2024 | Update
Image: Shutterstock

Nine months after Oct. 7: Where Israel stands now

Jul 10, 2024 | Update
Palestinian Red Crescent workers from Al-Najjar Hospital in the city of Rafah, south of the Gaza Strip (Image: Shutterstock)

Hamas’ impossible casualty figures

Mar 28, 2024 | Update
455daec3 C2a8 8752 C215 B7bd062c6bbc

After the Israel-Hamas ceasefire for hostages deal

Nov 29, 2023 | Update
Screenshot of Hamas bodycam footage as terrorists approach an Israeli vehicle during the terror organisation's October 7, 2023 attack in southern Israel, released by the IDF and GPO (Screenshot)

Horror on Video / International Law and the Hamas War

Oct 31, 2023 | Update
Sderot, Israel. 7th Oct, 2023. Bodies of dead Israelis lie on the ground following the attacks of Hamas (Image: Ilia Yefimovich/dpa/Alamy Live News)

Israel’s Sept. 11, only worse

Oct 11, 2023 | Update
Screenshot 2025 03 28 At 11.35.48 AM

The day after the end of the Gaza war – and the new opportunities it presents: Ehud Yaari at the Sydney Institute

Mar 28, 2025 | Featured, Video
Screenshot

Jonathan Conricus in conversation with Joel Burnie

Feb 24, 2025 | Featured, Video
Sydney, January 2025 (Image: X)

Reacting to the latest antisemitic attacks: Colin Rubenstein on SBS Hebrew radio

Feb 3, 2025 | Video
Screenshot

Antisemitic bomb plot “a massive escalation”: Colin Rubenstein on Sky News

Jan 30, 2025 | Featured, Video
(Image: screenshot)

Antisemitism database “first step of many more that need to be taken”: Dr Colin Rubenstein on ABC TV

Jan 22, 2025 | Featured, Video
Screenshot 2024 12 20 At 12.44.43 PM

AIJAC speaks out against hate… Will you join us?

Dec 20, 2024 | Featured, Video

RECENT POSTS

Anti-Hamas protests in Gaza (Image: Reddit)

Gaza protests: A turning point or a moment of desperation?

A “deep well of hatred” in segments of the Muslim community contributed to the recent outburst  of extremism and antisemitism in Australia (Image: Diana Zavaleta/ Shutterstock)

Essay: The Politics of Hatred

Iranian President Masoud Pezeshkian (left) may hint at agreeing to nuclear negotiations, but it is Supreme Leader Ali Khamenei (right) who will ultimately make the decision (Image: Khamenei.ir)

Iran: Moving beyond diplomatic delusions

A statue of Moses holding the Ten Commandments (Image: Shutterstock)

The Last Word: One Story

Israeli PM Netanyahu controversially announces he needs to fire Shit Bet chief Ronen Bar (Screenshot)

Marching toward controversy and division

SORT BY TOPICS