When Iran’s internet traffic dropped to just 1-4% of normal levels after coordinated US-Israeli strikes in late February, the country didn’t simply go offline it all but disappeared from the global internet, according to network monitoring data cited by cybersecurity firms. But even as connectivity inside Iran collapsed, the cyber conflict didn’t. It spilled outward. Operations continued beyond its borders, driven by a mix of state-backed actors, proxies and opportunistic hackers who don’t need a functioning domestic internet to keep going.This surge isn’t happening in a vacuum. It’s building on a cybercrime ecosystem that was already growing and getting faster. Will the attacks go down anytime soon ?

