DDoS Attacks Spike Amid Escalating Geopolitical Tensions
Pro-Iranian hacktivist groups significantly intensified distributed denial-of-service (DDoS) attacks across the Middle East following a joint military operation by the United States and Israel, according to cybersecurity firm StormWall.
RELATED: Hacker Groups take to Telegram, Signal and Darkweb to assist protestors in Iran
The surge comes against the backdrop of rising regional instability. In late February 2026, the U.S. and Israel launched coordinated strikes targeting Iran, triggering retaliatory actions across the Middle East and rapidly escalating the conflict.
StormWall Records Eightfold Increase in Malicious Traffic
StormWall, which monitors DDoS activity affecting its clients across the region, reported a sharp spike in attack volumes that coincided directly with the start of the joint military operation.
Between March 1 and March 20, 2026, the number of DDoS attacks recorded in the Middle East increased eight times compared to the same period in February. Analysts identified Israel as the most targeted country, accounting for 36% of all attacks, followed by the United Arab Emirates (21%) and Bahrain (14%).
Two-Wave Attack Strategy Targets U.S. Allies
According to StormWall’s analysis, the cyber offensive unfolded in two distinct phases. The initial wave focused on large-scale DDoS attacks against Israeli government institutions and telecommunications providers.
In the second phase, attackers broadened their scope to include Bahrain, Qatar, Kuwait, and the UAE—countries with close strategic ties to the United States and hosting American military installations. This expansion highlights a deliberate attempt to disrupt allies perceived as part of the broader conflict.
Public Sector, Banking, and Telecoms Hit Hardest
The most severe attack volumes were directed at the public sector, financial institutions, and telecommunications networks—critical infrastructure sectors that are both symbolically significant and operationally vital.
By targeting these systems, hacktivist groups aimed to cause maximum disruption, undermine public confidence, and strain national security and economic stability during a period of heightened geopolitical tension.
Warning of Further Escalation
Commenting on the situation, Ramil Khantimirov, Founder of StormWall, warned that the current campaign represents an unprecedented level of cyber aggression in the region.
“The volume of DDoS traffic currently hitting the Middle East is unlike anything we’ve seen before — even during past periods of geopolitical tension. This is a highly organized, targeted, and growing campaign that will likely continue to escalate. Organisations with digital infrastructure in the region should act now, as the coming months are likely to bring even more frequent and more powerful attacks.”

































