Everything Everywhere All at Once

Overview

In June 2025, the long-standing tensions between Israel and Iran escalated into direct conventional warfare. Through our intelligence monitoring, Graphika tracked and analyzed the activities of Iranian state and state-aligned media outlets, networks of inauthentic social media accounts, and pro-Iran hacktivist groups. This two-part report details how these actors mobilized to spread unified narratives, despite varying levels of proven state affiliation.

Our analysis revealed a playbook used by pro-Iran actors to manage perceptions during and after the war. We observed a notable delay in the initial mobilization of an information response, suggesting a lack of preparation for a large-scale on-the-ground conflict. Once mobilized, however, these actors collectively clouded the information space by disseminating a mix of breaking news alerts, aggressive threats, and unverified claims. Our reporting outlines the tactics employed to target domestic and global audiences.

Here, in the first of two parts, we cover the activity we observed and analyzed from state and state-aligned media as well as from two sets of inauthentic social media accounts. Part two will cover the activity we observed from pro-Iran hacktivist groups.

 

Key Findings

We identified the following key findings across parts 1 and 2 of this report.

• Pro-Iran hacktivist groups, media, and social media mobilized during the 2025 Israel-Iran war and spread similar narratives regardless of their proven or self-described state affiliation.
• We observed a delayed response to the war, highlighting that actors were likely unprepared for large-scale conventional warfare.
• Actors disseminated a mix of breaking news alerts, threats, and unverified claims to muddy the information space.
• State media and inauthentic networks targeted broader, global audiences through multi-lingual coverage.