ZeroFox Intelligence Flash Report - Cyber SITREP #2 - U.S. Military Strikes on Iran

ZeroFox Intelligence Flash Report - Cyber SITREP #2 - U.S. Military Strikes on Iran - March 6, 2026

In this Flash report, ZeroFox researchers report on the latest cyber developments relating to U.S. and Israeli combat operations against Iran.

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

View the full report here

U.S. and EU federal agencies have issued additional warnings that Iran-aligned cyber threat actors are very likely to target Western critical and digital infrastructure in retaliation for the ongoing U.S.-led attacks in Iran.
Pro-Palestinian threat collective and extortionist group “Handala Hack Team” and pro-Russian threat actor “NoName057(16)” have thus far been among the most prominent threat collectives active during the Iran conflict.
ZeroFox has observed an abundance of likely illegitimate cyberattack and leak claims this week. Less-established threat actors are likely to use geopolitical events to gain inflated prominence by exaggerating or misrepresenting the severity and scale of their cyber-based operations or to propagate political messaging and/or fearmongering.
Between February 26 and March 5, ZeroFox observed at least 287 separate regional and industry-wide cyber incidents that included ransomware attacks, Initial Access Broker (IAB) sales, and vulnerabilities/exploits—a likely steadying volume in cyber incidents day-to-day as the conflict continues.