Israel's cyber directorate warns of Iran-linked wiper attacks via stolen credentials
In early March 2026, Israel's National Cyber Directorate (INCD) warned of a wave of destructive cyberattacks on Israeli organisations, which it attributed to Iran. According to the directorate, in most cases attackers got in with authentic user credentials stolen in the past or leaked in earlier attacks, and also exploited a weakness in remote access, then deleted servers, workstations and data. Haaretz reported the INCD said no critical infrastructure had been compromised. The directorate urged password changes, two-factor authentication, checks on administrator accounts, remote-access updates and backups.
- Incident response
- Cloud configuration review
- Network & infrastructure testing