The U.S. Department of Justice announced the seizure of four internet domains, which it said were used by Iran's Ministry of Intelligence and Security to carry out transnational cyberattacks and psychological operations. The U.S. Department of Justice stated that the seized sites were used to publish stolen data, promote cyberattacks, and incite targeting of journalists, dissidents, and individuals as part of what it described as Tehran-backed 'psychological warfare' operations. Investigations revealed that these platforms were interconnected through a unified operational structure that included destructive cyberattacks and the use of stolen data in propaganda campaigns. U.S. authorities noted that one of these groups claimed responsibility for a malware attack on a multinational medical technology company in March 2026. The activities also included publishing the sensitive personal information of hundreds of individuals, including people linked to Israeli institutions, as well as sending death threats to Iranian dissidents and journalists both within and outside the United States. The Department of Justice confirmed that this step is part of broader efforts to disrupt Iran-related cyber infrastructure and counter threats to U.S. national security.
