Cyber Warfare in Iran Amid Public Unrest, Government Bans, and Geo-Political Tensions

Published
Written by:
Vishwa Pandagle
Vishwa Pandagle
Cybersecurity Staff Editor
Key Takeaways
  • Communications Disrupted: Protests that began in Tehran in late December escalated into a nationwide crisis affecting Iran’s communications infrastructure.
  • State Response: Authorities responded with widespread internet shutdowns and restrictions on phone services.
  • Messages Still Circulated: Despite the restrictions, some protesters used satellite connectivity and offline methods to share images and messages.

A protest that began in Tehran on December 28, 2025, has been followed by reported deaths, nationwide internet blocks, and most recently, a television broadcast intrusion.

There have been reports of the government considering restoring internet access, due to the growing international, media, and diplomatic pressure.

It all began on December 28, 2025 when protestors infuriated over the economic crisis and inflation took to the streets to speak out against the government. Since the protests erupted, there have been reports of thousands of deaths with the recent figure reaching 5,000

Internet Blackout and Protests

The people are demanding an end to the current political leadership besides free elections. Other concerns include the rising cost of living, currency collapse, inflation, and unemployment.

With protestors across Tehran, Qom, Isfahan, Shiraz, Ilam, Mashhad, Karaj, Zanjan, Hamadan, and Qeshm among others local authorities responded by taking the internet offline in several cities.

Starlink satellite internet owned by SpaceX was reportedly available to users who bypassed the blackouts, leading to further actions. Protests gained more attention when social media content of women lighting cigarettes to burn the photographs of the Supreme Leader went viral in the second week of January. 

Local authorities added thresholds to services and intermittent blocks. The move aimed at restricting communication exchange and reporting. 

The protest now includes students, shopkeepers, and political groups among others.

How Incidents are Unfolding in Iran

NetBlocks, a global internet monitoring service that has been posting about Iran’s internet block added that it has been without connectivity for over 12 days. Iran’s second-largest mobile operator removed its CEO after state media reported he delayed enforcing government-ordered internet shutdowns during nationwide protests.

Several individuals posted online that they were unable to communicate with family members in Iran for over three weeks. While Iranian officials threatened harsher punishments for protestors, with over 24,000 detained, later statements also suggested gradual restoration of some services.

Badr Satellite Intrusion and the Political Unrest

The protests later extended from internet to broadcast infrastructure. Iranian television channels carried on Badr satellite were reportedly compromised airing messages from Iran’s exiled Crown Prince Reza Pahlavi asking the people and military forces to join demonstrations.

Amid escalated tensions, geopolitical statements came from Israel and the United States with Israel issuing warnings and Donald Trump threatening strong action if protestors were executed. 

Trump also assured that ‘help is on the way,’ urging the crowd to continue the demonstrations.

Last week, Iran’s parliament speaker warned of preemptive strikes on U.S. and Israeli regional assets, to which Benjamin Netanyahu responded saying that if that attack is carried out, they will act with strength that Iran hasn’t yet known.

With Internet, phones, and media access being close to zero, information from inside Iran is very difficult to reach the global media with a few still making way. It remains to be seen where this situation leads to and who will retain political control.


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: