On Wednesday, October 30, the Canadian government released a new assessment identifying Iran’s regime, along with Russia and China, as a major cybersecurity threat to national security, warning that Iran’s digital influence has extended beyond the Middle East to target Western countries.
According to the Canadian government’s new assessment, the Iranian regime’s ongoing efforts to track and monitor regime opponents through the internet have created an escalating cybersecurity challenge for Canada and its allies.
Canada’s National Cybersecurity Threat Assessment indicates that actors affiliated with Iran’s regime have used high-profile events, such as the downing of Flight 752 in Tehran, as themes in phishing campaigns targeting the Iranian diaspora and Canadian officials. These campaigns have targeted key sectors, including aerospace, defense, and telecommunications, to achieve intelligence goals.
In recent years, Iran’s regime has become a major player in global cyber warfare, executing more complex attacks against its regional and international adversaries. Over the past decade, Iran’s regime has expanded its cyber capabilities, with government-backed groups targeting various sectors, including government, finance, energy, and media, in the region and the West.
According to Canada’s National Cybersecurity Threat Assessment for 2025, Iran’s regime has used its ongoing cyber conflicts with Israel to bolster its espionage tactics and aggressive cyberattacks, now employing these methods against Western targets.
Canadian intelligence officials state that although Canada may not be the primary focus of Iran’s cyber activities, regime-affiliated actors likely have access to computer networks in Canada, including critical infrastructure.
In recent weeks, major technology companies like Google, Microsoft, and Meta have reported malicious cyber activities linked to Iran’s regime, warning that these efforts may intensify and could even incite violence against political figures to create unrest and influence the upcoming elections in the United States.
The Microsoft Threat Analysis Center (MTAC), in research related to the U.S. elections published last week, stated that Iran’s regime is preparing to undertake additional influence operations.
The report indicates that Iranian groups tasked with targeting the U.S. elections may attempt—just as they have in the past—to conduct influence operations in the pre- and post-election periods via cyber infiltration efforts initiated weeks or even months in advance.
