Get your free personalized podcast brief

We scan new podcasts and send you the top 5 insights daily.

Instead of deploying its own intelligence operatives, Iran's hybrid warfare model in the UK involves recruiting low-level actors, often teenagers, through criminal intermediaries and social media to conduct attacks for payment.

Related Insights

Just as North Korea evolved from a non-threat to a world-class hacking power targeting financial institutions, Iran's cyber prowess is frequently underestimated by military and intelligence analysts. This creates a recurring strategic blind spot.

AI acts as a great leveler in cyber warfare, promoting all actors to a higher tier of capability. Mid-level state actors like Iran can now execute attacks previously only possible for top players like Russia or China, and individual criminal groups gain the power of small states.

A TikToker giving military target coordinates for Israeli infrastructure to Iran exemplifies a new, destabilizing reality. Individual citizens, without state backing, can now use their platforms to directly influence foreign military actions, blurring the lines between commentator, propagandist, and combatant in modern warfare.

The world is no longer in a simple state of war or peace. While kinetic warfare is obvious, Russia and other actors engage in hybrid warfare—cyber attacks, GPS jamming, sabotage. This constant, low-level conflict is harder to detect and define, blurring the lines.

Human smugglers and traffickers effectively use social media platforms to reach potential migrants, offering a much easier, albeit dangerous, path than navigating complex official visa processes. Their speed and reach far exceed government communication efforts, often spreading disinformation to exploit vulnerable people.

Adversaries now understand that Western financial markets are a key vulnerability. Iran is incentivized to attack energy infrastructure not just for physical disruption, but to directly target market sentiment and trigger financial instability, making economic warfare a primary strategy.

With digital footprints making simple cover stories obsolete, intelligence agencies now build entire, fully-funded companies to create a plausible pretext for an agent to interact with a high-value target. This provides sophisticated 'cover for action.'

A Russian intelligence document reveals a plan to recruit drone operators from non-traditional pools. The proposal targeted an estimated 10,000 Iranian students in Russian universities, as well as Russian-speaking Tajiks and pro-regime Syrian Alawites. This unconventional strategy leverages existing cultural and political links for military training, bypassing conventional recruitment channels.

Rather than surgical strikes, which have a poor historical track record, the most effective foreign support for Iranian protesters is restoring their internet connectivity. The regime kills in the dark; offensive cyber operations that tear down its 'digital iron wall' directly empower citizens and expose atrocities.

Many professional scamming operations, especially in post-Soviet states, are state-adjacent. These "patriotic hackers," often former intelligence agents, are given freedom to operate against foreign targets as long as they avoid domestic ones, acting as a reserve force for state cyber warfare.