AI in warfare: Report says Iran using ChatGPT and Gemini to target US, Israel with malware attack

Iran is reportedly using ChatGPT, Gemini, and other Western AI tools to develop malware, create phishing campaigns, and strengthen cyber warfare capabilities against the US and Israel, according to a report.

In Short

• Iran reportedly using Western AI tools for cyber operations
• AI helping create malware, phishing campaigns, and fake personas
• Iran also using AI for warfare and propaganda efforts

With negotiations between Tehran and Washington facing uncertainty and the US continuing to pressure Iran through sanctions and other measures, Iran is reportedly turning to Western AI models to strengthen its cyber capabilities and disinformation warfare campaigns. According to a report by the Financial Times, Iranian hackers are using tools such as ChatGPT, Gemini, and other Western AI programs to develop malware, craft phishing messages in Hebrew and Arabic, and create convincing fake online personas aimed at targets in the US and Israel.

According to the report, Iranian operators are using AI-generated identities to build trust with potential targets. They reportedly engage in conversations under fake personas, gradually encouraging victims to lower their guard before sending malicious links or requests. Israel has reportedly been hit by waves of phishing emails and text messages, with some messages allegedly inviting recipients to collaborate with Iranian intelligence.

Meanwhile, the United Arab Emirates said in May that it was facing more than half a million cyberattacks every day, some reportedly assisted by AI tools including OpenAI's ChatGPT.

Tech companies are trying to stop it

Major technology companies are aware of the growing threat, but the challenge is becoming increasingly difficult. According to the report, Google detected the state-linked Iranian group APT42 using its Gemini AI model in late February. The group reportedly used the system for various research tasks, including studying methods related to American F-35 fighter jets.

While technology companies continue to remove suspicious accounts and restrict misuse, new accounts and tactics continue to emerge.

The use of AI goes beyond phishing

Iran's reported use of AI is not limited to cyberattacks and online scams. The Financial Times reports that AI is also being used to support electromagnetic warfare, accelerate decision-making in battlefield command centres, and improve drone guidance and underwater targeting systems.

The Islamic Revolutionary Guard Corps (IRGC) has claimed that some of its cruise missiles feature AI-assisted guidance, navigation, and electronic warfare evasion capabilities.

Iran is also reportedly using AI-powered translation tools to study Western military research more quickly, allowing analysts to process foreign-language material at a much faster pace.

AI is also becoming a propaganda weapon

Beyond cyber warfare, AI has reportedly become an important tool in Iran's online influence campaigns. According to the report, state-linked accounts regularly share AI-generated videos targeting US President Donald Trump and promoting Iranian narratives online.

In April, YouTube banned the channel Explosive Media, which allegedly used AI-generated content to mock Trump and amplify pro-Iran messaging.

Iran is building its own AI ecosystem

Iran has developed much of its AI infrastructure using open-source and locally developed models hosted on closed networks away from outside scrutiny. At the same time, Iran has targeted major US technology and industrial companies in what they describe as retaliation for attacks on Iranian territory.

In March, the IRGC and affiliated groups expanded their list of targets by describing major US cloud provider entities as "legitimate targets," accusing them of supporting American and Israeli military intelligence operations. Iranian drones struck two AWS data centres in the United Arab Emirates and Bahrain in April.

- Ends