Overview
- Independent trackers say the shutdown has reached day 18 with nationwide connectivity near zero, while select officials, state-aligned media and permitted visitors retain access.
- Restrictions intensified in the past 48 hours to curb remaining workarounds, with VPN suppression, disconnection of the Rubika app and cuts to so‑called “white” SIM cards reported by NetBlocks, Kentik and activists.
- Contraband links through Starlink-fed VPNs or border bridge networks exist but are costly, risky and scarce, according to NetBlocks’ Alp Toker.
- Darktrace reports that groups suspected of Iranian ties, including Seedworm, Homeland Justice and Handala, continue operating from external infrastructure despite the domestic blackout.
- Handala’s recent wiper attack disrupted Stryker’s Microsoft environment before the company contained it, the group later claimed U.S. government intrusions without independent verification, and vendors warn of sustained activity with Akamai logging a 245% jump in regional cybercrime and expectations of critical infrastructure and supply‑chain targeting.