Iran Leverages AI to Enhance Asymmetric Warfare Capabilities in Ongoing Conflicts

Executive Overview

From January to June 2026, Iran faced intense military, economic, and political challenges, managing to navigate these pressures through its established hybrid warfare strategy. This strategy — integrating asymmetric military actions, cyber warfare, information campaigns, and proxy operations — has been significantly bolstered by artificial intelligence (AI). Rather than needing cutting-edge AI technology, Iran demonstrates that its foundational strengths are rooted in an adept use of asymmetric tactics.

Throughout this period of crises, Iran adeptly compensated for its conventional military shortcomings with scalable, cost-effective asymmetric strategies. The incorporation of AI appears to have elevated its cyber capabilities, accelerated propaganda production, and broadened the dissemination of its influence narratives. While the deployment of AI in directly military applications remains somewhat ambiguous, collaboration with Russia hints at possible enhancements informed by experiences in Ukraine, evident in the drone operations geared toward Israel and other regional targets. Domestically, AI-powered surveillance systems have likely played a pivotal role in quelling dissent following the 2022 “Woman, Life, Freedom” protests, particularly in the aggressive responses witnessed in early 2026.

The Implications of AI on Cyber Operations

The risk of prolonged low-grade conflict remains, especially with the looming threat of escalated interactions with the United States and Israel. Iran’s growing utilization of AI in cyber operations is set to pose a more pronounced threat to Western and regional critical infrastructure. The swift creation and distribution of AI-generated propaganda open avenues for targeted influence operations, jeopardizing trust among citizens and businesses alike. Additionally, as Iran enhances its military capabilities, especially through Russian support in drone technology, the potential risks to infrastructure and maritime logistics cannot be overstated. Organizations need to fortify their defenses against these evolving AI-empowered threats, which are increasingly complex and challenging to attribute.

Strategic Findings

• AI technologies have likely accelerated Iranian capabilities already present in cyber operations, influence campaigns, and repression, rather than creating entirely new ones.
• The primary strategic advantage for Iran appears to reside in its information warfare, where AI enables rapid production of propaganda that shapes public perception and supports its objectives.
• Collaborations with foreign entities, particularly Russian advancements in military AI and drone technology, are likely driving Iran’s integration of AI into its military strategies.
• To counter AI-enhanced tactics, entities must build resilience against cyber intrusions, AI-assisted phishing, and combined operational threats.
• Post-conflict, Iran will likely focus on rebuilding its missile and drone capacities while integrating AI innovations to enhance operational effectiveness.

Behind Iran's AI Strategy

Since a directive from former Supreme Leader Ali Khamenei in 2021, Iran has pursued a centralized national AI strategy aimed at diminishing reliance on foreign technology and fostering its standing as a regional tech power. However, ongoing sanctions have severely restricted its ambitions and technological growth.

From the 2021 directive through the events of 2026, Iran has prioritized the development of AI for varied applications — including cyber operations, influence campaigns, military enhancements, and internal security measures. Iranian cyber actors have effectively integrated generative AI and large language models into their operations, from spearphishing campaigns to online misinformation initiatives while officials stress the importance of AI in their drone and missile frameworks. Iran appears to leverage AI not just as a technological necessity but as an essential tool for maintaining regime stability in light of external pressures.

AI Augmenting Asymmetric Warfare Techniques

Insights from threat analysis and social media monitoring reveal that while Iran's use of AI appears to enhance its asymmetric tactics substantially, it hasn't transformed the fundamental principles guiding its conflict engagements. For instance, despite significant internet blackouts hindering comprehensive understanding, it's evident that AI has fortified Iran's capacity for hybrid warfare without fundamentally altering its strategic logic.

Cyber Operations and Generative AI

Iranian cyber strategies proactively employed AI even before the volatile events of early 2026. The crises likely catalyzed state-sponsored actors to utilize generative AI for refining techniques across various operational facets, including reconnaissance and malware development. However, despite these advancements, the core tactics — largely centered on social engineering, data exfiltration, and other established methods — remain unchanged and familiar.

Enhancing Reconnaissance Tactics

A notable example of generative AI usage occurred when the Iranian-affiliated persona “CyberAv3ngers” utilized ChatGPT for reconnaissance against programmable logic controllers (PLCs), significantly improving their targeting capabilities against industrial systems. This highlights how AI can expediently convert intent into actionable outcomes, presenting concerning risks for U.S. critical infrastructure.

One attack attributed to Iranian hackers showcased the capability of undermining industrial systems through targeted sabotage, even if direct evidence of AI application in that instance is lacking. What's clear is that AI assists in research and exploitation phases, lowering the barrier for entry into attacking a range of critical industry infrastructures.

AI in Malware Development

Iranian-backed threat groups are increasingly leveraging AI to streamline malware development. Reports indicate that the group GreenBravo has used AI platforms to expedite the creation of specialized malware tools. For instance, recent operations demonstrated a sophisticated implementation of AI in crafting malware payloads, with evidence pointing toward AI’s influence on code creation practices that are fundamentally reshaping their approach to digital threats.

These incidents suggest an evolving landscape of cyber warfare where AI not only enhances existing tactics but potentially empowers new ones that are both unpredictable and highly effective against their adversaries.

As the geopolitical climate shifts, the ramifications of Iran's effective harnessing of AI will likely continue to be felt across multiple domains, ranging from cyber operations to information warfare, prompting an urgent need for enhanced vigilance and adaptive strategies among all stakeholders involved.