Canada has identified Iran as one of its top strategic cyber threats in its 2025 National Cyber Threat Assessment, citing Tehran's expanding cyber activities and surveillance of global opponents as a growing security risk.
“Iran’s persistent efforts to track and monitor regime opponents through cyberspace present a growing cyber security challenge for Canada and our allies,” the report says.
Iran has become a player in global cyber warfare, conducting increasingly sophisticated attacks on regional and international targets. Iranian cyber capabilities have evolved over the past decade, with state-sponsored groups targeting a variety of sectors, including government, finance, energy, and media.
Canada’s 2025 National Cyber Threat Assessment lists Iran, alongside Russia and China, as a primary cyber threat to national security, warning that Iran’s digital reach now extends beyond the Middle East to target Western nations.
As per the assessment, Iran has used its ongoing cyber clashes with Israel to strengthen its espionage and offensive cyber tactics, which it now deploys against Western targets.
Canadian intelligence officials say that while Canada may not be a primary focus of Iran’s cyber activities, Iranian actors “likely have access to computer networks in Canada, including critical infrastructure.”
According to the statement, the Iranian actors have used high-profile events, like the downing of Flight PS752 over Tehran, as themes in phishing campaigns aimed at the Iranian diaspora and Canadian officials. These campaigns have targeted key sectors, including aerospace, defense, and telecommunications, in pursuit of Iran’s intelligence-gathering objectives.
In just the past few weeks, major tech companies Google, Microsoft, and Meta have all reported malicious activities linked to Iran, warning that Iranian efforts could escalate, potentially inciting violence against political figures to sow chaos and compromise the integrity of the upcoming elections in the US.
Microsoft Threat Analysis Center (MTAC) research related to the US elections released last week said Iran is gearing up for additional influence operations.
“Iranian groups tasked with targeting the US elections may make an effort—as they have in the past—to run influence operations both shortly before and soon after the election by leveraging cyber intrusions from weeks to months prior,” the report said.
On October 14, a report revealed that MTAC's investigation identified an online persona, controlled by Iran, pretending to be an American and urging Americans to boycott the elections over both candidates' support for Israel’s military actions.
In response, a spokesperson for Iran's mission to the United Nations denied any Iranian interference in the US presidential elections. "These allegations are entirely baseless and utterly unacceptable," the spokesperson stated.
As Iran’s cyber capabilities and global reach expand, Canada and its allies face an increasingly complex challenge in countering Tehran’s disruptive and coercive cyber strategies.
Iran’s ongoing conflict with Israel has led to calls for weaponization of the country’s nuclear program, first from hardline commentators, then MPs, then top advisors.
Khamenei has so far resisted all such calls publicly. His rejection of weapons of mass killing on religious grounds is regularly cited by Iranian officials as proof that Iran’s nuclear activities are peaceful and cannot be otherwise.
Given Khamenei’s official stance, most comments by Iranian officials to date have been read as posturing. However, some recent publications by the group, the Strategic Council on Foreign Relations (SCFR), may suggest a meaningful shift in Iran’s defense doctrine.
Khamenei established the SCFR in 2006 as an advisory body to assist his office in the development of foreign policy and strategic planning. Due to the Islamic Republic’s opaque workings Khamenei’s decision-making is difficult to parse, but it is clear that informal bodies like the SCFR have become increasingly significant in this process.
Since Iran’s missile attack against Israel on October 1, the SCFR has released multiple publications regarding the nuclear issue. This includes two interviews discussing how Russia and China’s nuclear doctrines have become more aggressive in response to recent actions by the United States and its allies. Both highlight the importance of nuclear weapons in enhancing deterrence capability, drawing evident parallels with Iran’s position vis-à-vis Israel.
Another paper outlines the strategic rationale behind Iran’s missile attack against Israel. It highlights Iran’s willingness to do more to deter Israel, warning that future responses would be harsher. These publications follow more explicit calls by the SCFR for Iran to reconsider its nuclear doctrine in recent months.
"It is only natural for Iran---as a nation facing threats and unilaterally bearing all the costs of alleviating Western countries’ “nuclear concerns” without reaping any economic or security benefit---to pose fundamental questions about the pertinence and sagacity of its current nuclear and defense doctrine," an article on the SCFR website reads.
Groundwork for a shift
Such statements may not bear the supreme leader’s seal, but precedent suggests that they can be the groundwork for an eventual shift in Khamenei’s position, indicating that his advisors’ recent comments may be more than mere posturing.
Over the past several years, the advisory body has established itself as a sounding board for changes in the foreign policy of the Islamic Republic.
SCFR publications frequently anticipate public decisions by the supreme leader and other state officials – indicating that Khamenei may first convey his intentions to the SCFR for deliberation.
One example of this is a 2020 publication signaling support for closer strategic cooperation with Russia, prior to Iran’s accession into the Shanghai Cooperative Organization, support for the invasion of Ukraine, and the recently completed bilateral security agreement.
Another example is Iran’s adoption of sanctions relief and resumed negotiations with Western states as key foreign policy objectives under the presidency of Masoud Pezeshkian.
Before his term, the Islamic Republic appeared less interested in these efforts, as Khamenei prioritized the development of a “resistance economy” to counter the pressure of international sanctions.
As early as 2023, the SCFR promoted pursuit of sanctions relief as part of the agenda for Iran’s foreign policy in 2024, moving away from the “resistance economy” approach. In the lead up to Iran’s 2024 election, the SCFR released additional statements engaging with the subject. Since taking office, Pezeshkian has pursued these objectives with Khamenei’s tacit support.
Altogether, recent SCFR publications mark a change in tone from the advisory body’s earlier insistence that Iran is a responsible actor on the issue of nuclear proliferation, in line with Khamenei’s rhetoric, to one of more nuclear risk-readiness.
This brings concerning implications, especially in the context of Iran’s efforts to increase its stockpile of enriched uranium earlier this year.
In recent years, Khamenei has used the SCFR to extend a lifeline to politically isolated figures, deepen ties with ascendent officials, and keep policymakers under his personal influence.
This is demonstrated by the recent appointment of former SCFR secretary Abbas Araghchi as Foreign Minister, and his replacement by Ali Baqeri Kani, a prominent member of Ebrahim Raisi’s presidential administration. Khamenei has also increasingly relied upon the SCFR as an instrument for personal diplomacy—particularly in maintaining ties with the leaders of Iran’s armed allies in the region.
As Iran and Israel draw ever closer to a full-scale war, the SCFR’s recent publications may suggest that the Islamic Republic will continue to weigh the option of amending its nuclear doctrine.
This course will also be influenced by the expected implementation of a security agreement with Russia, which may enhance Tehran’s confidence.
Should the Iranian nuclear program be openly weaponized, the Islamic Republic will be further emboldened in its efforts to destabilize the region, support Russia’s war in Ukraine, and challenge U.S. interests.
It would also bring a significant risk of further proliferation, particularly as the regime formalizes the Axis of Resistance through a codified alliance structure.