Operation Epic Fury: Largest Cyberattack in History Knocks Iran to 4% Internet Connectivity as AI Drones Strike
The US-Israeli joint strike on Iran deployed unprecedented cyber warfare, AI-powered LUCAS drones costing $35K each, and electronic warfare systems that plunged Iran into digital darkness — reducing internet connectivity to just 4% of normal levels in what experts call the largest cyberattack in history.
The technology dimension of the US-Israeli strike on Iran that began at 8:15 AM Israel time on February 28, 2026 is unlike anything the world has seen before. While conventional airstrikes and cruise missiles made the headlines, the real story for the technology community is the unprecedented convergence of cyber warfare, AI-powered autonomous drones, and electronic warfare systems that effectively erased a nation of 88 million people from the internet.
This is not hypothetical future warfare. This is what modern conflict looks like right now.
The Digital Blackout: Iran at 4%
According to internet monitoring organization NetBlocks, Iranian internet connectivity plummeted to just 4% of ordinary levels within hours of the strikes beginning. Critical infrastructure, official news sites including the state-run IRNA and ISNA agencies, and IRGC security communications systems stopped functioning almost simultaneously.
Western intelligence sources described the cyber operation as accompanying Israel's Operation "Roaring Lion" — a coordinated assault combining electronic warfare that disrupted navigation and communications systems, massive denial-of-service (DDoS) attacks, and deep intrusions into data systems tied to Iran's energy and aviation infrastructure.
The objective was strategic: prevent coordination of counterattacks and disrupt Iran's ability to launch drones and ballistic missiles by crippling the IRGC's cyber and electronic warfare units' communication backbone. Reports from Tehran, Isfahan, and Shiraz described total failures of local apps, government digital services, and banking platforms.
This represents the largest documented cyberattack against a nation-state's infrastructure in history. The 2010 Stuxnet attack on Iran's Natanz centrifuges was surgical. The 2022 attacks on Ukraine's Viasat terminals were targeted. This was comprehensive — an entire country's digital infrastructure functionally disabled.
LUCAS Drones: $35,000 AI-Powered Weapons Enter Combat
Perhaps the most significant technological debut in Operation Epic Fury was the first combat deployment of LUCAS (Low-Cost Unmanned Combat Aerial System) drones produced by Spektreworks. These autonomous, long-range drones cost approximately $35,000 each — developed by reverse-engineering Iran's own Shahed-136 drone technology.
For context, a single Tomahawk cruise missile costs approximately $2 million. An MQ-9 Reaper drone runs over $30 million per unit. The LUCAS drones represent a fundamental shift in the economics of aerial warfare: disposable precision weapons that cost less than a mid-range sedan.
CENTCOM deployed LUCAS drones alongside Tomahawk cruise missiles and stealth fighter jets in a multi-platform approach. One US official stated that the use of "multiple and layered weapons capabilities effectively suppressed Iranian air defense systems." Approximately 200 Israeli Air Force fighter jets simultaneously struck roughly 500 targets — the largest strike sortie in IAF history — while US assets including carrier strike groups, guided-missile submarines, and long-range bombers equipped with deep-penetration munitions engaged defended infrastructure from standoff range.
The technology implications extend far beyond this specific conflict. If a $35,000 drone can perform precision strikes against hardened military targets, the entire calculus of air defense economics changes. Defending against swarms of expendable autonomous weapons is exponentially more expensive than deploying them. This is the autonomous weapons reality that defense analysts have warned about for years — and it is now operationally proven.
Electronic Warfare and Space-Based Intelligence
Operation Epic Fury's opening phase relied heavily on space-based intelligence, electronic warfare aircraft, and cyber support elements that degraded Iranian radar coverage, air defense coordination, and facility communications before the first kinetic strike landed. This "softening" phase is critical — it represents the modern doctrine of multi-domain operations where cyber, space, electronic, and kinetic warfare operate as integrated layers rather than sequential phases.
Targets included Islamic Revolutionary Guard Corps command and control facilities, Iranian air defense capabilities, missile and drone launch sites, and military airfields across Tehran, Isfahan, Qom, Karaj, and Kermanshah. CSIS analysis indicates the operation seeks to dismantle Iran's ballistic missile architecture and halt nuclear weapons capability by targeting command nodes, launch systems, and sensitive enrichment facilities.
The Cyber Retaliation Threat
With conventional military options severely degraded, cybersecurity experts warn that cyber operations may become Iran's primary instrument of asymmetric retaliation. A threat intelligence report from cybersecurity firm Anomali assessed that the strikes have "destroyed Iran's conventional military options, making cyber operations the regime's sole remaining instrument of asymmetric retaliation."
Iran's cyber capabilities are well-documented. The IRGC operates APT33 and APT35, while the Ministry of Intelligence (MOIS) controls APT34 (OilRig) and MuddyWater — all classified as advanced persistent threat groups by the global cybersecurity community. These groups have previously targeted US water treatment facilities, energy infrastructure, and government agencies.
CISA has already issued advisories warning that the conflict will likely trigger a surge in state-sponsored hacking activity "specifically targeting operational technology and critical infrastructure through the exploitation of internet-facing industrial control systems and vulnerable programmable logic controller hardware."
For US businesses, the message from cybersecurity researchers is clear: the threat of Iranian cyber retaliation against critical infrastructure — energy grids, water systems, financial platforms, and healthcare networks — is now elevated to its highest level in years. The Anthropic Pentagon situation and broader debates about AI in defense take on new urgency when a nation-state adversary's primary remaining capability is digital.
What This Means for Technology
Three immediate implications for the technology sector:
1. Cyber defense spending will accelerate. Every Fortune 500 CISO is recalculating threat models this weekend. Iranian APT groups have demonstrated willingness to target private sector infrastructure as retaliation for military operations. Companies with any Middle Eastern operations, energy sector exposure, or government contracts should expect heightened threat activity.
2. Autonomous weapons economics are now proven in combat. The $35,000 LUCAS drone changes procurement math across every military in the world. Defense contractors focused on traditional multi-million-dollar platforms face a paradigm shift. The companies building low-cost autonomous systems — and the AI models that guide them — just received the most powerful proof of concept imaginable.
3. Internet sovereignty is a wartime vulnerability. Iran's two-tiered internet architecture, designed to give the government control over domestic connectivity, became the vector for its own digital destruction. Nations with centralized internet chokepoints — which includes far more countries than most people realize — are watching this play out with deep concern. The geopolitics of technology infrastructure has never been more relevant.
Developing Situation
This is an actively developing situation. Iran has already launched retaliatory missile and UAV strikes against six US military bases across Iraq, Jordan, Bahrain, Qatar, Kuwait, and the United Arab Emirates. Cyber retaliation against US and allied digital infrastructure is expected in the coming hours and days.
We will continue updating this coverage as the technology dimensions of this conflict unfold.
This article covers the technology and cybersecurity dimensions of the conflict. For comprehensive geopolitical coverage, see reporting from CNN, Al Jazeera, and PBS.