Israel’s Invisible Intelligence: Inside the Cyber Spying Units Targeting Iran
When it comes to Israeli intelligence, most are familiar with the name Mossad. However, beyond Mossad lies an intricate network of cyber and military intelligence divisions working in tandem to safeguard Israel’s national interests—especially against Iran. Among them, Units 8200, 9900, 504, and Branch 54 form the four critical pillars of the Israeli military’s intelligence structure, each playing a unique role in countering threats from Iran and the broader region.
The Pillars of Israeli Intelligence
Unit 8200 is Israel’s most powerful signal intelligence corps, responsible for conducting electronic surveillance and cyber operations. It is also tasked with developing tools for intelligence gathering and intercepting digital communication. Analysts within this unit collect, decode, and disseminate classified information to operational authorities. During times of war, Unit 8200 operates directly under the Israeli Army Headquarters.
Unit 9900, established in 2020, specializes in satellite imagery and aerial reconnaissance. It analyzes visual data collected from satellites, reconnaissance aircraft, and drones to support Israeli commanders and decision-makers.
Unit 504, working closely with both Mossad and Shin Bet, focuses on Human Intelligence (HUMINT). Its primary role is to extract human-sourced intelligence through field agents and informants.
Branch 54 is dedicated exclusively to monitoring Iran’s Islamic Revolutionary Guard Corps (IRGC), also known as Pasdaran-e-Inqilab. According to its unnamed commander, “Our operations are entirely focused on Iran’s Pasdaran-e-Inqilab. Every day we identify targets and research how to impact them. We have already marked several Iranian sites, and their nuclear capability does not intimidate us. Any military conflict with Iran will be a completely different kind of war.”
Surveillance, Sabotage, and Strategic Supremacy
These elite units have already demonstrated their capabilities, allegedly orchestrating high-profile assassinations of Iranian nuclear scientists and top military leaders within a single night. Israel’s Defense Forces (IDF) claim full control over Tehran’s airspace due to intelligence from these branches. Moreover, Israeli air forces assert that one-third of Iran’s ballistic missile launchers have been neutralized through coordinated preemptive operations.
According to Israeli media outlet Ynet, this covert intelligence unit under the IDF was officially formed in June 2023, specifically in preparation for potential conflict with Iran and the IRGC. At the time, the unit comprised only 30 members.
The IDF claims Unit 8200 is its largest and most crucial intelligence division, employing over 10,000 personnel. These elite agents are recruited from the country’s top academic and military institutions. In fact, it is often said that Unit 8200 is larger than both Mossad and Shin Bet in terms of manpower.
Unit 8200’s responsibilities range from wiretapping communication networks, decrypting military and intelligence data, harvesting intelligence from social media and the internet, to developing cyber tools for offensive and defensive operations.
Global Standing and Cyber Legacy
In terms of technological capability, Unit 8200 is frequently compared with the United States’ National Security Agency (NSA). While its operations remain largely classified, defense experts assert that the unit is instrumental in both defensive strategies and offensive operations on behalf of Israel.
One of its most notorious operations includes the 2010 cyberattack on Iran’s nuclear facilities, in which the Stuxnet virus was deployed, severely damaging Iran’s nuclear centrifuges.
In an interview with Haaretz, Unit 8200’s deputy commander Yury Siv remarked, “Our cyber warfare with Iran is unmatched in the world.”
The unit is also known for utilizing individuals and groups active on social media to gather intelligence covertly.
Originally founded in 1952 as the Second Intelligence Service Unit, Unit 8200 was later referred to as Unit 848 and Unit 515. According to international sources, Unit 8200 played a key role in gathering intelligence from Egypt and Syria during the Six-Day War of 1967, contributing significantly to Israel’s victory.
After Hamas launched its assault on southern Israel on October 7, 2023, Unit 8200 came under public scrutiny. A report by The New York Times revealed that the unit had discontinued its monitoring of Hamas radio transmissions a year prior to the attack.
Despite such lapses, Israel continues to rely on its cyber espionage elite to both preempt threats and exert influence across enemy lines—an effort spearheaded by the powerful, albeit secretive, intelligence machinery operating behind the scenes.
