Over the past six months, the world has witnessed an unprecedented surge in the scale and impact of AI-driven cyberattacks, registering a sharp 340% increase. This massive rise is driven by the intensive mobilization of state-sponsored hackers and criminal organizations following military strikes carried out by the United States and Israel against Iranian targets on February 28. This was revealed in an in-depth digital forensics study conducted by the UAE-based Riyad Group and published by Gulf News on Tuesday.
The financial impact of these breaches is no longer just fleeting figures; the study showed that multinational organizations now incur an average loss of $7.2 million per individual breach. This figure represents a massive 48% leap in just 18 months. Making the situation even more dangerous is the ability of these AI-enhanced threats to hide and remain undetected inside victim networks for an average of 387 days, giving attackers ample time to steal sensitive data and destroy infrastructure.
A war fought through shadow codes
Within hours of Operation Epic Fury, more than 60 cyber groups allied with Iran mobilized on Telegram, according to data from Palo Alto Networks’ Unit 42. Armed with advanced AI-powered reconnaissance tools, these groups targeted internet-connected industrial control systems, default credentials, and corporate infrastructure across the United States and its allied nations.
Meanwhile, investigators at DigiCert tracked approximately 5,800 cyberattacks launched by roughly 50 Iran-linked groups, directly targeting vital companies in the United States, Israel, Bahrain, Kuwait, and Qatar, according to a report published by Fortune magazine. This frantic activity highlights how geopolitical tensions have transformed into open cyber warfare.
The UAE at the heart of the confrontation
The United Arab Emirates has become a primary target in this digital battle. In a statement to Al Ittihad, Dr. Mohamed Al Kuwaiti, head of the UAE Cybersecurity Council, revealed that the country faces between 500,000 and 700,000 cyberattacks daily, with a special focus on vital strategic sectors.
Al Kuwaiti explained that actors linked to Iran have heavily utilized generative AI tools, including ChatGPT, to carry out complex reconnaissance operations, design highly convincing phishing campaigns, and develop malicious software capable of bypassing traditional defenses.
Escalation of high-profile attacks
Among the most destructive incidents recently recorded is the “Dark Sword” campaign in March 2026. Described as a cross-platform, AI-powered breach, it successfully compromised over 62,000 endpoints across North America and Europe. Initial estimates of the damage caused by this attack exceeded the $1 billion mark, according to Gulf News. Security researchers at Google Threat Intelligence Group and Lookout independently confirmed that the Dark Sword attack involved a full iOS exploit chain and was executed by multiple actors, including a suspected Russian espionage group.
In a separate attack on February 14, the energy infrastructure of 47 facilities across Germany, France, and the Netherlands was completely paralyzed. State-backed hackers used AI-enabled deepfake technology to impersonate regulatory authorities. Cybersecurity expert Dr. Sarah Chen described the instant video generation technique used as “completely flawless,” enabling attackers to plant malware that caused cascading failures in electrical grids, affecting 14 million people, while direct financial losses reached $847 million.
AI shifts the balance of power
Cybersecurity leaders warn that artificial intelligence has radically tipped the scales in favor of attackers. In this context, expert Kevin Mandia stated during the RSAC 2026 conference: “Because of asymmetry in the cyber domain, where one person in an offensive position can create a massive burden for millions of defenders, speed amplifies this imbalance.”
In more blunt and decisive words, cybersecurity expert Riyad Kamal Ayoub summarized the current landscape: “The security architecture that protected you 18 months ago is now completely obsolete and worthless. In the era of AI, the question is no longer whether a catastrophic breach will happen, but when.”
Frequently Asked Questions
What is the scale of financial losses caused by modern cyberattacks?
According to recent studies, multinational organizations incur an average loss of $7.2 million per individual breach, representing a 48% increase in just 18 months.
How do hackers use artificial intelligence in their operations?
Hackers use AI tools like chatbots to conduct reconnaissance, write phishing emails, develop complex malware, and utilize deepfake technology to impersonate individuals and breach critical systems.
What is the Dark Sword campaign and when did it occur?
The Dark Sword campaign is a massive and advanced cyberattack that occurred in March 2026, successfully compromising over 62,000 connection points in North America and Europe, causing losses estimated at over $1 billion.
How severely was Europe’s energy infrastructure affected by the breaches?
On February 14, a cyberattack utilizing deepfakes paralyzed 47 energy facilities in Germany, France, and the Netherlands, resulting in power outages for 14 million people and causing $847 million in losses.
