Southeast Asia Region-specific Iran-israel war Threat Intelligence

Executive Briefing

Situation at Glance

On February 28, 2026, the United States and Israel jointly launched Operation Epic Fury, a coordinated pre-emptive military strike against Iranian nuclear and military infrastructure across Tehran, Isfahan, and Qom. Iran responded within hours with ballistic missile strikes against US military bases in Bahrain, Qatar, Kuwait, and the UAE. This marks the first full-scale direct kinetic war between Iran and Israel, ending years of shadow conflict and entering an open, multi-domain confrontation.

For Southeast Asia, this is not a distant conflict. It is an active threat event with immediate, measurable consequences across cybersecurity, financial systems, energy supply and political stability.

Why Southeast Asia is in the crosshairs

Southeast Asia sits at the intersection of four simultaneous risk vectors triggered by this war:

1. Iran's Asymmetric Cyber Doctrine - With its conventional military degraded by US-Israeli strikes, Iran's primary retaliation tool is offensive cyber operations. Iranian state-sponsored groups (APT33, APT34, APT35, APT42, MuddyWater) have pre-positioned infrastructure across global networks and will now activate it against US-aligned targets, energy sector organizations, financial institutions, and telecom providers, all heavily present in SEA.
2. US Military Presence in the Region - The Philippines hosts four active US EDCA military bases. Iran has already demonstrated willingness to strike US military infrastructure globally. These bases and the Philippine government systems and defense contractors around them, are plausible cyber and physical retaliation targets.
3. Muslim-Majority Population Dynamics - Malaysia and Indonesia, the world's third and first largest Muslim-majority nations respectively, face elevated risk of domestic radicalization, social unrest, and hacktivist mobilization should Iranian religious sites or civilian populations be struck. Pro-Palestinian hacktivist group INDOHAXSEC is already operationally active in both countries.

Energy & Financial System Exposure - 13 million barrels of oil per day transit the Strait of Hormuz, representing 31% of global seaborne crude. Iran has threatened and partially demonstrated Hormuz closure capability. Singapore operates as SEA's primary energy trading and refining hub. A blockade scenario would push oil to USD 130–300/barrel, a direct economic shock to every SEA economy. Singapore is also identified by FinCEN as one of three global hubs for Iranian shadow banking, with $9 billion in suspicious transactions in 2024 alone, placing it directly in the path of intensified US secondary sanctions enforcement.

‍