Iran

Iran operates as a sovereign state with extensive critical national infrastructure and financial systems, including petrol distribution networks, steel production facilities, central banking institutions, and state-controlled media. These sectors have been recurrent targets of cyber operations, as demonstrated by attacks disrupting fuel stations in 2023, steel plants in 2022, and banking systems in 2019 and 2022. The country's infrastructure supports domestic energy distribution, industrial manufacturing, and financial services, with incidents revealing operational dependencies on networked systems. Iranian authorities manage these assets through state-linked entities, though specific organizational structures remain undisclosed in available reporting. The government also oversees tightly controlled media apparatuses, evidenced by the 2022 intrusion into state television broadcasts that displayed anti-government messages.

Persistent cybersecurity challenges characterize Iran's digital landscape, with multiple incidents attributed to geopolitical adversaries. Groups such as Gonjeshke Darande (Predatory Sparrow) have claimed attacks on fuel infrastructure and industrial facilities, often framing operations as responses to Iranian regional activities. State institutions have acknowledged breaches affecting millions of bank accounts in 2019 and central banking systems in 2022, though technical impacts were inconsistently detailed. Iranian cybersecurity agencies have publicly countered espionage operations, notably asserting the neutralization of a CIA cyber network in 2019. These events reflect recurring vulnerabilities across financial, industrial, and media sectors, with official responses frequently alleging foreign state involvement—particularly from Israel and the United States—while dissident groups have also claimed intrusions targeting government-controlled platforms.