Three years after the Simchat Torah massacre, Israel faces a familiar enemy on a new battlefield. Iran’s hand in the October 7 atrocities went far beyond rockets and training camps. Now, as the nation prepares for the October 27 election, Tehran’s cyber warriors and bot armies are back, waging a quieter war on Israeli trust and unity. The question is not whether they will strike, but whether Israel will be ready this time.
The Internal Front: A Day of Horror, Three Years Later
On the morning of October 7, 2023, thousands of terrorists breached the Gaza border fence, overrunning IDF posts, kibbutzim, the Nova music festival, and Sderot. Some 1,200 people were murdered, most of them civilians, and 251 were dragged into Gaza as hostages. It was the deadliest day for Jews since the Holocaust.
‘They Were Speaking Farsi’
Survivors are still piecing together that day. Eyal Eshel, whose daughter Roni was killed at the Nahal Oz base, told Channel 2 that survivors heard terrorists inside the compound speaking to each other in Farsi. “I understand from this detail that they collected information about us before October 7,” he said. The IDF has not confirmed the account, but it raises a question Israel has asked since that morning: How deep was Iran’s hand in the attack?
Tehran’s Fingerprints: Training, Planning, and Strategy
Evidence of Iranian sponsorship is heavy. The Wall Street Journal reported that some 500 Hamas and Islamic Jihad operatives received combat training in Iran in September 2023, led by the IRGC, with Quds Force commander Esmail Qaani attending. Hamas minutes seized by the IDF show Yahya Sinwar spent over two years planning the attack and worked to persuade Iran and Hezbollah to join a wider war. The pattern is clear: Hamas pulled the trigger, but the gun, the training, and the strategy of a multi-front war came from Iran.
The External Front: Cyber Warfare and the Bot Army
Since October 7, Iran has sharply escalated cyber operations against Israel, according to the Foundation for Defense of Democracies (FDD), through fronts such as Handala Hack, CyberAv3ngers, and IDFLeaks. Handala, tied to Iran’s Intelligence Ministry, has leaked the phone of Prime Minister Benjamin Netanyahu’s aide, breached Naftali Bennett’s Telegram account, doxxed Unit 8200 members, and claimed 197 gigabytes from the Nahal Sorek nuclear center. “Most of its mission is to damage public trust, create a sense of penetration, and amplify media resonance,” said Rafael Franco, former deputy head of the National Cyber Directorate.
The Bot Army That Was Waiting
The Israeli firm Cyabra scanned over 162,000 accounts discussing the attack and found one in four was fake. In the first 48 hours, it found ~40,695 fake profiles and 312,000+ pro-Hamas comments and posts, with 531 million+ views. Many accounts were created over a year earlier and lay dormant until October 7, a sign of preparation, not spontaneous outrage.
Iran Hosts, Its Partners Amplify
Iran did not fight alone. Qatar was the megaphone, contributing to Hamas’s Doha leadership and Al Jazeera’s reach. Turkey was a safe haven, hosting Hamas officials and pushing the same narratives through state media and troll networks. The result: an echo chamber where a Hamas Telegram claim could be picked up by Al Jazeera, repeated by Turkish outlets, and multiplied by fake accounts within hours.
What the Bots Did
According to Cyabra and FDD, the networks hijacked hashtags like #IStandWithIsrael, recycled old war footage as fresh evidence from Gaza, rewrote the massacre as justified, and targeted Israelis directly through Hebrew fake outlets like “Dofek TV” and AI deepfakes. They left a distorted global picture, pressure on hostage families and soldiers, and an infrastructure that can be switched back on at any moment.
The Next Battle: October 27
Security officials warn Iranian influence operations are already underway to deepen Israeli divisions ahead of the vote. An investigation by the OSINT platform Golden Owl, reported by The Jerusalem Post, mapped 119,717 accounts and confirmed 57 as part of an Iran-linked campaign posing as Israelis. Fifty-seven may sound small, but October 7 showed what a small, patient network can do: plant a narrative and let real users spread it for free.
Israel Cannot Be Caught Off Guard Twice
Before October 7, the warning signs were there. Israel saw pieces of the picture and didn’t act on the whole. Three weeks before the vote, we cannot make that mistake again. Israel should treat October 27 as a likely target and prepare now. That means protecting the vote: election systems, party databases, and the Central Elections Committee’s infrastructure should be hardened and tested, with backup plans ready.
It also means we must expect a strike timed to the vote. Handala hits at the moment of maximum impact; a fake “leak,” false results, or a deepfake on election morning should be planned for, not hoped away. Platforms must be held accountable. X, Meta, TikTok, and Telegram must act fast against networks researchers have already exposed.
We must also stay alert beyond the screen. Iran has opened multiple fronts before. Security services should be on heightened alert for any attempt to exploit election day, online or off.
The Front Line Is Every Phone
The government can’t do this alone. Before you share a shocking clip, an anonymous “leak,” or a post designed to make you hate your neighbor, ask who benefits. Too often, the answer is Tehran.
Three years ago, Iran helped bring a massacre to Israel’s border. Since then, it has waged a quieter war on what rockets can’t destroy: Israelis’ trust in each other. The answer is not panic but preparedness. If Israel goes into October 27 alert, protected, and united enough to vote on its own terms, it will have won a battle Iran spent years preparing for.
FAQ: Iran’s Election Interference and Israel’s Response
How is Iran interfering in Israel’s election?
Iran uses cyber attacks, fake social media accounts, and AI deepfakes to spread disinformation and deepen divisions among Israeli voters, according to security officials and researchers.
What can Israeli citizens do to protect against disinformation?
Citizens should verify shocking clips or anonymous leaks before sharing, ask who benefits from the content, and rely on official sources for election information.
Why is Iran targeting Israel’s election?
Iran aims to destabilize Israeli democracy, erode public trust, and create chaos, which serves its broader strategic goal of weakening Israel from within.