Iran is reportedly using cybercriminal tactics in destructive cyber attacks. The nature and scope of these attacks are not entirely clear, but they may involve ransomware, physical intrusion, and targeting of various entities, including law firms and infrastructure. The situation appears to be evolving, with some outlets warning of escalating threats and others noting shifts in tactics by pro-Iranian ransomware operators.