US Imposes Sanctions on 27 Iranian Airlines, Targeting Military Logistics

The US Treasury Department has escalated its economic pressure on Iran by imposing sanctions on 27 major Iranian airlines and 35 related entities. This move is aimed at curbing Iran's capabilities in nuclear, missile, and military operations, particularly targeting Mahan Air, which has been under scrutiny for its alleged support of the Islamic Revolutionary Guard Corps (IRGC).

This action is part of a broader initiative known as "Operation Economic Outcast," which began on August 24, 2026, and encompasses various sectors of Iran's economy, including aviation, digital assets, and shipping. The sanctions specifically prohibit US persons from engaging in transactions with the designated airlines, while foreign companies providing assistance to these carriers may face secondary sanctions.

Market analysts have noted that the sanctions could increase the likelihood of Iran closing its airspace by the end of the year, with current market pricing reflecting a 26.5% probability of such an outcome, up from 24% a week prior. Observers are urged to monitor statements from Iran's Civil Aviation Organization for any indications of airspace status changes.

In addition to the sanctions, the Treasury has suspended prior authorizations for the re-export of civil aircraft to Iran, which could have significant implications for the global aviation supply chain, particularly given Iran's reliance on gray-market parts and maintenance services.

New Developments in Iranian Cyber Operations

Iran's cyber operators have increasingly turned to Google's Gemini AI model, with over ten state-backed groups exploiting its capabilities for cyberattacks and disinformation campaigns. Notably, Iranian actors now represent the largest nation-state user demographic of Gemini among tracked threat groups.

According to Google's Threat Intelligence Group, Iranian information operations constitute approximately 75% of all AI-assisted disinformation efforts observed. The group APT42, linked to Iran's Islamic Revolutionary Guard Corps, is responsible for over 30% of all Iranian APT activity involving Gemini.

APT42 has been utilizing Gemini for reconnaissance, phishing campaigns, and developing attack tools, particularly before significant geopolitical escalations. This trend highlights how AI tools are integrated into existing cyber strategies rather than creating new attack methodologies.

Google's monitoring of AI exploitation by state actors has been ongoing since early 2025, with Iranian groups identified as the most prolific users of commercially available AI models, accounting for 75% of AI-powered influence operations detected.