Hackers Vow to Continue Cyberattacks Despite Iran-US Ceasefire

Pro-Iranian hacking groups say they will expand digital warfare despite a temporary military truce.

Apr. 8, 2026 at 8:06pm

Got story updates? Submit your updates here. ›

A highly detailed, glowing 3D macro illustration of a programmable logic controller (PLC) device used in industrial control systems, illuminated by neon cyan and magenta lights, conceptually representing the threat of state-sponsored cyberattacks on essential infrastructure.As Iran-linked hackers target industrial control systems, the threat of disruptive cyberattacks looms over critical infrastructure.Washington Today

Hackers allied with Iran have vowed to continue their cyberattacks on the U.S. and Israel, even as the two countries announce a temporary ceasefire in their military conflict. One prominent hacking group, Handala, said it would pause attacks on the U.S. but continue targeting Israel, warning that the 'cyber war did not begin with the military conflict, and it will not end with any military ceasefire.' U.S. authorities have warned that Iranian-linked hackers have infiltrated critical industrial systems, raising concerns about potential disruptions to key infrastructure like ports, power plants, and water facilities.

Why it matters

The escalating cyberwar between Iran and its adversaries has become an integral part of the broader military conflict, with hacking groups acting as proxies for Tehran. Despite a temporary ceasefire, these hackers have vowed to continue their digital attacks, posing an ongoing threat to American and Israeli organizations that could be targeted in retaliation or as part of Iran's asymmetric warfare strategy.

The details

Handala, a pro-Palestinian, pro-Iranian hacking group, has claimed responsibility for disrupting the operations of the U.S. medical manufacturer Stryker and hacking into FBI Director Kash Patel's personal email account, among other cyberattacks. The group said it would temporarily pause attacks on the U.S. but continue targeting Israel, vowing to revive its efforts against America 'when the time is right.' U.S. authorities have also warned that Iranian-linked hackers have infiltrated internet-connected industrial control systems used in critical infrastructure like ports, power plants, and water facilities, raising concerns about potential disruptions.

  • The ceasefire between Iran and the U.S. and Israel was announced in April 2026.
  • Handala claimed it would temporarily pause attacks on the U.S. but continue targeting Israel after the ceasefire announcement.

The players

Handala

A pro-Palestinian, pro-Iranian hacking group that has claimed responsibility for various cyberattacks, including disrupting the operations of the U.S. medical manufacturer Stryker and hacking into FBI Director Kash Patel's personal email account.

Kash Patel

The current FBI Director.

Stryker

A major U.S. medical equipment supply company that was targeted by Handala in a cyberattack.

Got photos? Submit your photos here. ›

What they’re saying

“We did not begin this war, but we will be the ones to finish it. And let it be clear: The cyber war did not begin with the military conflict, and it will not end with any military ceasefire.”

— Handala, Hacking group

“With a ceasefire, we will likely see an expansion of cyber activity both in scale and scope. These groups will likely try to execute a high-profile attack such as what we saw with Stryker.”

— Markus Mueller, Cybersecurity executive at Nozomi Networks

What’s next

U.S. authorities have urged organizations that use internet-connected industrial control systems to ensure their security precautions are up-to-date to mitigate the threat of cyberattacks from Iran-linked hackers.

The takeaway

The escalating cyberwar between Iran and its adversaries has become an integral part of the broader military conflict, with hacking groups acting as proxies for Tehran. Despite a temporary ceasefire, these hackers have vowed to continue their digital attacks, posing an ongoing threat to American and Israeli organizations that could be targeted in retaliation or as part of Iran's asymmetric warfare strategy.