Electronic Operations Room

Electronic Operations Room is a pro-Iranian hacktivist or state-aligned cyber persona that emerged during the rapid cyber escalation surrounding the February–March 2026 Iran crisis. It was identified alongside other pro-Iranian collectives and personas that collectively claimed more than 150 retaliatory cyber operations over a short period. The broader campaign environment included disruptive and destructive activity such as distributed denial-of-service attacks, website defacements, wiper malware deployment, ransomware, and claimed intrusions affecting industrial-control-related environments. Electronic Operations Room appears to operate within an ecosystem of ideologically aligned and potentially state-linked actors that included Handala Hack, Cyber Islamic Resistance, Dark Storm Team, and APT Iran. The available information supports characterization as a hacktivist or state-aligned actor rather than a clearly attributed standalone nation-state intrusion set. Reported targeting in the surrounding campaign spanned Israeli and Western organizations, including entities in energy, finance, healthcare, and other critical infrastructure sectors. High-confidence public detail on Electronic Operations Room specifically remains limited. Its inclusion among the actors claiming retaliatory operations indicates participation in coordinated or parallel influence-driven cyber activity associated with the conflict, but distinct tradecraft, malware families, victimology, and organizational structure are not currently available at sufficient confidence.