Almost immediately after the United States killed Iran’s top military general Qassim Suleimani, the Middle Eastern nation vowed to carry out “crushing revenge” for the slaying.
On Friday, cybersecurity fellow for the Carnegie Endowment for International Peace Jon Bateman told The Washington Post that “a cyberattack should be expected” in retaliation for Suleimani’s assassination.
The U.S. government appears to agree with that prediction.
On Saturday, the U.S. Department of Homeland Security issued a new terrorism threat bulletin in which it warned of Iran’s “robust cyber program” and noted that the nation is capable of “carrying out attacks with temporary disruptive effects against critical infrastructure in the United States.”
So, experts seem to believe an Iranian cyberattack is probably forthcoming — but it’s impossible to predict when such an attack might occur.
If Iran does launch a cyberattack against the U.S., though, private citizens are the likeliest target, according to Sergio Caltagirone of industrial cybersecurity firm Dragos.
“When countries pull cyber triggers to conduct cyber effects, a lot of the times it’s against civilian targets rather than military targets,” he told MIT Technology Review. “Right now it looks like civilians and innocent people all around the world, including Iranians, Americans, and Saudis, will bear the brunt of impact of these attacks.”
Just how devastating the impact of an Iranian cyberattack will be, however, is debatable.
Iran and the U.S. have been engaged in a cyberwar for years — the U.S. has reportedly used computer viruses to disrupt Iran’s nuclear enrichment facilities and oil infrastructure, while Iranian hackers were reportedly responsible for a cyberattack that crippled the government of Atlanta, Georgia, in 2018 — but chances are you haven’t even missed an email despite the ongoing conflict.
There is a possibility that Iran could hack the systems controlling America’s water treatment plants or power grids — but that would be a far more advanced type of cyberattack than the nation has launched in the past.
“It would be a significant escalation in terms of patience, capability, and long-term targeting,” Dragos’ Principal Adversary Hunter Joe Slowik told MIT Tech Review.
Additionally, one of the benefits of attacking an enemy in cyberspace over, say, dropping a bomb on them is that the digital world provides a greater opportunity to disguise the source of the attack.
Ideally, you get to hurt your enemy without them knowing you’re responsible and retaliating — meaning that if revenge is what Iran is after, a covert cyberattack is unlikely to satisfy.
“Taking out a leader like Soleimani is such a grave act, it’s going to warrant a very public response,” Chris Meserole, a fellow at the Brookings Institution’s Foreign Policy Program, told Wired. “Cyberattacks will allow them to immediately show they won’t sit idly by. But I can’t imagine it’s the sole way they’ll respond.”
READ MORE: What damage could Iran do with a cyber attack? [Sky News]