Iran's internet blackout extends into second week: NetBlocks

Iran continues to grapple with a significant internet blackout that has now stretched into its second week, as reported by the data monitoring organization NetBlocks on Saturday. In a social media update, NetBlocks highlighted that it's been a full week since the country was plunged into what it describes as 'digital darkness' due to a government-imposed national internet shutdown. As the blackout persists, public access to vital information and updates has been severely restricted, leaving citizens isolated while state officials and media maintain connectivity. According to NetBlocks, internet traffic in Iran has plummeted to approximately 1% of typical levels. The situation is further complicated by ongoing military actions, including U.S. and Israeli airstrikes targeting Iran. This campaign, which began a week ago, aims to mitigate Tehran's nuclear and ballistic missile capabilities and is seen as a move towards pressuring regime change. Historically, Iran has resorted to internet shutdowns during times of social unrest, with a similar situation occurring for several weeks in January amidst widespread protests. However, analysts suggest that this current disruption may stem from a mix of state-ordered censorship and possible external cyber interference. Kathryn Raines, the cyber threat intelligence team lead at Flashpoint, noted that while the exact reasons for the blackout remain ambiguous, both internal and external factors are likely at play. With the loss of internet service, many citizens are struggling to connect with family, document events, or access real-time information about the ongoing conflict. Experts in cybersecurity are cautioning that Iran could retaliate with cyberattacks, either through government channels or affiliated groups. Adam Meyers, head of counter adversary operations at CrowdStrike, indicated that they've already observed activities consistent with Iranian-aligned threat actors and hacktivist groups engaging in reconnaissance and launching denial-of-service attacks.