How Iran is fighting on multiple fronts, from missiles to misinformation

(File photo/AP)

As Iranian missiles were fired toward Israel, something else was happening at the same time. Phones across Israel began lighting up with messages. One claimed that Iranian forces had killed Prime Minister Benjamin Netanyahu. Another, disguised as an official Israeli alert, included a link to what turned out to be a malicious app.

None of this was entirely new on its own. But the timing stood out. The missile strike, the disinformation messages and the cyber activity all happened together, the New York Times reported.

A coordinated digital push

Security analysts say that combination is what makes this different. Instead of treating cyberattacks and propaganda as separate efforts, Iran appears to be using them alongside real-world strikes. The aim is not just to cause damage on the ground, but also to create confusion, fear and doubt at the same time.

Some of these messages reached hundreds of thousands of people before authorities could step in and warn users not to click on suspicious links.

Amplifying the narrative online

At the same time, Iran has been active on platforms like Telegram, putting out its own version of events. A lot of these posts exaggerate what actually happened, including false claims about American casualties. Some are also clearly trying to play on divisions in the US and Europe, pushing a stronger anti-war narrative.

Researchers say a mix of fake and real-looking accounts is being used to spread these messages. Some of them are designed to look like they belong to ordinary Americans or Israelis, which makes the content seem more believable at first glance.

A shift in strategy

What stands out is how open some of this has become. Accounts that were earlier trying to stay under the radar are now much more direct in their messaging. Instead of pretending to be from other countries, many are openly pushing pro-Iran views.

That suggests a change in approach. The focus now seems to be on reaching as many people as possible, even if it means giving up the cover these accounts once had.

Linking attacks to the wider conflict

There’s also an effort to tie everything into a bigger narrative. After the strike on the South Pars gas field, for instance, Iran-linked accounts pushed the idea that it was a joint US-Israel operation. This was despite attempts by US officials to distance themselves from it.

The messaging feels quite deliberate. It seems aimed at justifying further retaliation and building support for widening the conflict, especially towards sensitive areas like energy infrastructure.

Cyberattacks are part of the same pattern

At the same time, cyberattacks are unfolding alongside this. A group linked to Iran claimed it had hacked a US medical equipment company, calling it a response to earlier strikes.

Experts say Iran is also using online messaging to make these cyberattacks appear more effective than they might actually be, something that has been seen in other conflicts as well.

A more complex kind of warfare

Put together, this isn’t just about missiles or hacking in isolation. The messaging doesn't seem haphazard. It appears to be well-timed, with the goal of bolstering support for expanding the conflict and providing justification for additional reprisal, particularly in relation to sensitive targets like energy infrastructure.

The way that all of this is taking place simultaneously is noteworthy. Online chat, cyber activities, and missile strikes are all occurring simultaneously and feeding off one another.

This indicates to analysts how far the conflict has evolved. These days, it's not just about what occurs on the ground. It also has to do with how events are presented, how people understand them, and how stories proliferate alongside the conflict.