US–Israeli Operations (Reported, Never Officially Attributed)
United States and Israel, as reported; no government has attributed these operations on the record
- State organ
- None named
- MITRE ATT&CK groups
- No ATT&CK group
- Attribution basis
- Technical analysis and press reports citing unnamed officials (moderate confidence).
Mission Type
Sabotage and espionage against Iran's nuclear programme and regional targets
Primary Sectors
Operational Period
circa 2007 – 2012 (documented cases)
Attributed Cases
2
Attributed Cases
Activity Timeline
Attribution Basis
How firmly each operation is tied to this actor, and by whom. Confidence reflects the weight of public evidence, not intelligence-community ground truth (see methodology §08).
TTP Pattern Summary
Stuxnet manipulated Siemens controllers to damage enrichment centrifuges at Natanz. Flame was a modular espionage platform that used an MD5 collision to forge a Microsoft code-signing certificate.
Behavioural Signature
Highly targeted, technically advanced operations whose attribution rests on technical analysis and press reports citing unnamed officials. The profile exists so that these cases are named by their reported authors, as other states' operations are, with the weaker basis stated.
Governance Footprint
No formal attribution, sanctions or indictment. Stuxnet is central to debates on whether cyber sabotage can amount to a use of force.