In an unprecedented display of cyber warfare capability, Israel has executed what is being described as the largest cyberattack in history, plunging Iran into near-total digital darkness during a coordinated military operation on Saturday, February 28, 2026.
Near-Total Internet Blackout Confirmed
Independent internet monitor NetBlocks confirmed that Iran’s national connectivity dropped to just 4% of normal levels—effectively a complete nationwide shutdown. Cloudflare corroborated the data, showing internet traffic in the country falling to near-zero by 18:45 UTC (22:15 local time).
The cyberattack accompanied Operation “Roar of the Lion,” a joint US-Israeli military strike targeting IRGC command centers across Iran.
Critical Infrastructure Targeted
Western intelligence sources indicated the cyber operation was designed to:
- Disrupt IRGC communications infrastructure to prevent coordination of counterattacks
- Disable drone and ballistic missile launch capabilities by targeting Iranian cyber and electronic units
- Neutralize regime propaganda—the IRNA news agency website was taken offline, while Tasnim (IRGC-affiliated) experienced severe disruptions and displayed subversive messages against Supreme Leader Ali Khamenei
- Target energy and aviation infrastructure through deep intrusions into critical data systems
Reports from Tehran, Isfahan, and Shiraz described widespread failures of local apps and government digital services. Even Iran’s isolated “national internet” network—designed to operate independently from the global internet—reportedly collapsed under the combined offensive.
Multi-Domain Attack
The operation combined multiple attack vectors:
- Electronic warfare disrupting navigation and communications systems
- Distributed denial-of-service (DDoS) attacks against public-facing infrastructure
- Deep network intrusions targeting energy and aviation systems
- Information operations hijacking state media to broadcast anti-regime messages
This assault represents the culmination of a campaign that began in January 2026, when government satellite broadcasts were hacked to air content calling for the regime’s overthrow to millions of Iranian households.
Why It Matters
This operation demonstrates several critical developments in modern cyber warfare:
- Cyber operations as force multipliers: By blinding Iran’s command and control during kinetic strikes, the attackers significantly degraded defensive response capabilities
- Air-gapped systems are not immune: Even Iran’s isolated national internet could not withstand the coordinated assault
- State-level cyber capabilities continue advancing: The scale and coordination of this attack represents a new benchmark in offensive cyber operations
- Information warfare integration: Combining infrastructure attacks with propaganda hijacking creates psychological effects beyond the technical damage
Implications for Critical Infrastructure Security
Organizations worldwide should take note: if a nation-state’s isolated networks can be compromised during a coordinated attack, no organization is immune. This event underscores the importance of:
- Defense-in-depth strategies that assume breach
- Out-of-band communication capabilities
- Resilience planning for total connectivity loss
- Threat intelligence monitoring for geopolitical escalation that may impact your sector
Source: The Jerusalem Post, Security Affairs, NetBlocks
