Iran is grappling with a near-total internet blackout as tensions escalate with the United States and Israel, impacting over 90 million people. Connectivity has plummeted to around 1% of ordinary levels, according to data from internet watchdog NetBlocks, raising concerns about the flow of information and the ability of citizens to communicate. The disruption began over 48 hours ago and coincides with a period of heightened conflict in the region, prompting speculation about the cause – ranging from government-imposed shutdowns to targeted cyberattacks.
This isn’t the first time Iran has experienced widespread internet restrictions. The government has a history of initiating internet shutdowns during periods of civil unrest and conflict, most recently in January, when a blackout lasting several weeks coincided with widespread protests. NetBlocks has attributed the current outage to a “regime-imposed” nationwide internet shutdown, though Iranian officials have yet to comment publicly. “Shutdowns are a go-to tactic for the regime,” NetBlocks stated, “with the previous instance in January lasting several weeks and masking severe human rights violations.”
However, the current situation appears more complex. Reports suggest that the blackout may not be solely the result of a government decision. U.S. And Israeli actors are believed to have carried out cyberattacks on Iranian internet infrastructure alongside recent airstrikes, according to a Reuters report. These attacks have targeted government-aligned Iranian news websites and other online services.
One notable example is the compromise of BadeSaba Calendar, a popular religious calendar app with over 5 million downloads. Hackers reportedly replaced the app’s usual content with messages urging the Iranian armed forces to “grant up weapons and join the people” and declaring “It’s time for reckoning.” U.S. Cyber Command has not responded to requests for comment regarding these alleged cyberattacks, and CNBC was unable to reach the owners of BadeSaba for comment.
The leverage of cyberattacks as a tool in this escalating conflict isn’t modern. In January, Iranian state television was reportedly hacked, briefly broadcasting speeches by former U.S. President Donald Trump and the exiled son of Iran’s last shah, in an attempt to incite public revolt.
The Whitelisting Strategy
Despite the widespread disruption, some internet activity remains within Iran. Doug Madory, an internet analyst, observed on X that this limited activity could be attributed to a new government system of “whitelisting.” This system allows exceptions for groups deemed loyal to the government, effectively creating a segmented internet accessible only to select entities.
Potential for Cyber Retaliation
As Iran responds to U.S. And Israeli actions with its own strikes and drone attacks, cybersecurity experts warn of the potential for Iranian-aligned groups to launch retaliatory cyberattacks. Adam Meyers, head of counter adversary operations at CrowdStrike, stated in a statement shared with CNBC that his firm is “already seeing activity consistent with Iranian-aligned threat actors and hacktivist groups conducting reconnaissance and initiating denial-of-service attacks.”
Meyers added that these initial activities often precede more aggressive operations, and that in past conflicts, Iranian cyber actors have strategically aligned their attacks with broader objectives, targeting critical infrastructure such as energy, finance, telecommunications, and healthcare. A denial-of-service attack, as explained by CNBC, attempts to overwhelm a system with traffic, rendering it inaccessible to legitimate users.
Impact on Information Access and Human Rights
The internet blackout in Iran has significant implications for the country’s population. Beyond hindering communication, it restricts access to information and limits the ability of citizens to organize and express dissent. Human rights organizations have consistently raised concerns about the use of internet shutdowns as a tool for suppressing freedom of expression and masking human rights abuses.
The current situation also raises questions about the broader implications of cyber warfare in modern conflicts. As nations increasingly rely on digital infrastructure, the vulnerability of these systems to attack becomes a critical security concern. The events unfolding in Iran underscore the potential for cyberattacks to disrupt essential services and exacerbate geopolitical tensions.
The extent of the cyberattacks and the Iranian government’s response remain fluid. NetBlocks continues to monitor internet connectivity in Iran, providing real-time data and analysis of the situation. The next key development will likely be a statement from the Iranian government regarding the cause of the outage and any measures taken to restore full internet access.
This ongoing disruption to internet access in Iran highlights the growing intersection of geopolitical conflict and cybersecurity. Readers seeking information about digital security and online privacy can identify resources at the Electronic Frontier Foundation (https://eff.org/).
Share your thoughts on this developing story in the comments below.
