Overview
- The homepage was replaced with Persian text stating "Now we are in control" alongside images of Ruhollah Khomeini, Ali Khamenei and Mojtaba Khamenei.
- Administrators quickly posted a holding page, and the outlet was operating normally by Thursday.
- No group has claimed responsibility, with reports pointing to Iran-linked actors but no formal technical attribution.
- A February 28 DHS bulletin forecast website defacements by Iran-aligned hacktivists, matching the tactics used in this incident.
- Threat intelligence firms report a coordinated surge of pro‑Iranian and pro‑Russian hacktivist operations since late February that includes targeting media outlets, and YWN previously reported a 2023 cyber incident.