Pro-Iran Hacker Groups Launch Coordinated Cyberattacks Targeting Spotify and Israeli Citizens A pro-Iran hacker collective, the Islamic Cyber Resistance in Iraq – 313 Team, claimed responsibility for a DDoS attack that disrupted Spotify’s services on Tuesday, causing widespread access issues for users. Reports of outages surfaced on Wednesday evening around 8 p.m., with Spotify acknowledging the incident on X (formerly Twitter), stating that its app, support site, and web player were experiencing slowdowns or failures. The group later boasted on Telegram that the attack had "completely disabled" the platform’s main servers. In a separate campaign, Iran-linked hackers targeted Israeli citizens with threatening WhatsApp messages on Monday, sent from hijacked or spoofed business accounts. The messages, written in English, warned recipients of impending missile strikes if Israel did not cease military actions, referencing "Sayid Majid missiles" and urging civilians to stockpile supplies. The National Cyber Directorate is investigating the source, attributing the activity to Handala, a group known for combining cyberattacks with psychological warfare. The same group, Handala, also published a "target list" on Sunday allegedly exposing 60 senior officers from the IDF’s Egoz commando unit. However, the list included only 48 individuals, most of whom were veterans and reservists not active officers with some openly identifying their past service on social media. The group framed the disclosure as a threat, declaring the individuals would become targets for "the resistance’s shadows." Analysis by The Jerusalem Post found that none of those listed held senior ranks, with the highest being a non-commissioned officer (NCO). The incidents reflect a broader pattern of Iran-backed cyber operations targeting both digital infrastructure and civilian morale, leveraging disruptions and psychological tactics in ongoing regional tensions.

Cyber Espionage and Hacktivism Escalate in Middle East, Raising Risks for India’s Critical Infrastructure Recent cyberattacks in the Middle East including a historic offensive by Israel against Iran have heightened concerns about potential spillover threats to India’s critical infrastructure. Cybersecurity experts warn that state-backed and hacktivist groups, particularly those aligned with Iran, may target Indian sectors such as power grids, telecom networks, banking systems, and government services in retaliation for regional geopolitical tensions. On Saturday, Israel executed what has been described as the largest cyberattack in history against Iran, causing a near-total internet blackout and disrupting government services, media, energy, and aviation. The attack coincided with the compromise of BadeSaba Calendar, a widely used Iranian prayer app with over 5 million users, which was hijacked to send push notifications urging surrender during joint US-Israeli airstrikes in Tehran. Indian cybersecurity firms, including PwC and CloudSEK, have issued advisories anticipating increased risks of distributed denial-of-service (DDoS) attacks, phishing campaigns, ransomware, and credential-based intrusions. Experts note that cyber warfare often precedes physical conflict, with misinformation, espionage, and intelligence-gathering serving as early indicators of broader aggression. India has faced similar threats before, including during Operation Sindoor and the 2025 India-Pakistan tensions, when foreign hacker groups such as Moroccan Soldiers, Team R70 (Russia), Lulzsec Arabs, and Islamic Hacker Army targeted government and private sector digital infrastructure. The current escalation in the Middle East suggests a renewed wave of cyber threats, with Indian firms on high alert to mitigate potential disruptions.