Full Report
As expected, Iran has repeatedly targeted prized missile defense radars across the Middle East in retaliation for the joint U.S.-Israeli air campaign that is ongoing. Iran’s attacks on high-value radars that enable the region’s missile defense capabilities appear to have succeeded on multiple occasions. The irony that lower-end long-range kamikaze drones are perhaps the biggest threat…
Analysis Summary
# Incident Report: Iranian Kinetic Attacks on Regional Missile Defense Radars
## Executive Summary
Iranian forces have successfully conducted a series of kinetic strikes targeting high-value missile defense radar installations across the Middle East. These attacks, utilizing low-cost long-range kamikaze drones, resulted in the destruction of a U.S. AN/TPY-2 radar and significant damage to an AN/FPS-132 phased array radar. The compromise of these assets has created critical gaps in regional early-warning and missile interception capabilities during an ongoing period of heightened regional conflict.
## Incident Details
- **Discovery Date:** Approximately March 2026 (ongoing reporting)
- **Incident Date:** Periodic attacks culminating in early March 2026
- **Affected Organization:** U.S. Military / Regional Allied Defense Forces
- **Sector:** Defense / National Security
- **Geography:** Jordan, Qatar, and broader Middle East region
## Timeline of Events
### Initial Access
- **Date/Time:** Ongoing, reported March 9, 2026
- **Vector:** Aerial penetration of sovereign airspace
- **Details:** Launch of long-range one-way attack (OWA) unmanned aerial systems (UAS), commonly referred to as kamikaze drones.
### Lateral Movement
- **N/A:** As this is a kinetic/physical incident, movement consisted of flight path navigation to bypass or overwhelm localized point-defense systems.
### Data Exfiltration/Impact
- **Impact:** Physical destruction of sensitive hardware and loss of sensor telemetry. The primary impact is the "blinding" of missile defense networks.
### Detection & Response
- **Detection:** Radar monitoring and satellite reconnaissance.
- **Response Actions:** Deployment of counter-UAS (C-UAS) task forces and joint U.S.-Israeli air operations to suppress launch sites.
## Attack Methodology
- **Initial Access:** Physical breach of airspace.
- **Persistence:** Not applicable; single-use expendable munitions.
- **Privilege Escalation:** Not applicable.
- **Defense Evasion:** Use of low-altitude, low-RCS (Radar Cross Section) drones to fly beneath the coverage of the high-end radars they are targeting.
- **Credential Access:** Not applicable.
- **Discovery:** Visual/Electronic reconnaissance used to identify static coordinates of massive radar arrays.
- **Lateral Movement:** Traversal from Iranian or proxy launch sites to target coordinates.
- **Collection:** Real-time battle damage assessment (likely via satellite or secondary drones).
- **Exfiltration:** Not applicable.
- **Impact:** Kinetic destruction and fragmentation damage to sensitive electronics and phased-array faces.
## Impact Assessment
- **Financial:** Extremely high; AN/TPY-2 and AN/FPS-132 systems cost hundreds of millions to billions of dollars to manufacture and deploy.
- **Data Breach:** None (Physical compromise).
- **Operational:** Severe disruption to regional missile defense; reduced ability to intercept hypersonic or ballistic threats.
- **Reputational:** Public demonstration of the vulnerability of advanced Western technology to "low-end" asymmetrical threats.
## Indicators of Compromise
- **Behavioral indicators:** Increased activity at known Iranian UAS launch sites; detection of low-flying, slow-moving aerial signatures (Shahed-class variants).
- **Defanged Network Indicators:** hxxps[://]threatbeat[.]com/project/the-risk-for-cyber-or-u-s-critical-infrastructure-attacks-in-iran-conflict/
## Response Actions
- **Containment:** Strengthening of "point defense" systems (e.g., C-RAM, short-range missiles) immediately surrounding radar sites.
- **Eradication:** Joint air strikes against Iranian drone manufacturing and launch infrastructure.
- **Recovery:** Assessment of damage at the Qatar FPS-132 site to determine if the array can be repaired in situ.
## Lessons Learned
- **Asymmetric Vulnerability:** Extremely expensive, high-tech assets are being neutralized by inexpensive, "low-end" technology.
- **Static Asset Risk:** Large, fixed radar installations are easy to target once localized; mobility or decoy systems are increasingly necessary.
- **Defense-in-Depth:** Missile defense radars that look "up" into space require better integrated "close-in" protection to look "around" for low-altitude drones.
## Recommendations
- **Enhanced C-UAS:** Mandate the deployment of dedicated counter-drone electronic warfare (EW) and kinetic interceptors at all high-value sensor sites.
- **Mobility:** Shift toward more mobile radar architectures (like the AN/TPY-2's transportable configuration) to avoid becoming static targets.
- **Redundancy:** Increase the density of the sensor mesh to ensure that the loss of a single "prized" radar does not create a total blackout in coverage.