313 Team Claims CVE-Based DDoS Disrupted Microsoft 365 for Five Hours

Summary
In an interview, 313 Team claimed it disrupted Microsoft 365 for over five hours using a CVE-based DDoS method. The group also claimed it is developing RATs, ransomware and stealers, and plans supply-chain operations; these assertions are not independently verified.
Key points
- 313 Team claimed its DDoS attack disrupted Microsoft 365 for more than five hours; the article provides no independent confirmation.
- The group said it scans servers for CVEs that can consume resources and uses them in network-based DDoS attacks; it did not identify a specific CVE.
- The group claimed it is developing RATs, ransomware and information stealers, and plans to target supply chains with new software.
- 313 Team described its ideology as aligned with Iran’s Wilayat al-Faqih while denying affiliation with an official entity.
- The group said it collaborates with other cyber teams and selects targets in response to geopolitical developments.
Article Details
- Event Type
- Threat group activity and interview: 313 Team describes its cyber operations and claims a Microsoft 365 DDoS disruption.
- Impact
- 313 Team claims its CVE-related network DDoS activity disrupted Microsoft 365 for more than five hours and affected most Microsoft services. The article does not independently verify the claimed disruption. The group also says it is developing RATs, stealers, and ransomware and plans supply-chain operations.
MITRE ATT&CK
Threat Actors
Vendors
Products
Cleverincluded government infrastructure in Israel, Kuwait, and the United States; educational platforms like Clever and Moodle; Microsoft services; and various Western-aligned organizations reflecting an operational scopeMicrosoft 365 Apps for Enterpriseinfrastructure disruptions against Western and Israeli targets, claiming a five-hour disruption of Microsoft 365.Moodlegovernment infrastructure in Israel, Kuwait, and the United States; educational platforms like Clever and Moodle; Microsoft services; and various Western-aligned organizations reflecting an operational scope that
Countries
Iran313 Team is an Iran-aligned Islamic hacktivist group active since 2023 that conducts DDoS attacks, data breaches, and infrastructure disruptions against Western and Israeli targets, claiming a five-hour disruption ofIsraelTheir targets have included government infrastructure in Israel, Kuwait, and the United States; educational platforms like Clever and Moodle; Microsoft services; and various Western-aligned organizations reflecting anKuwaitTheir targets have included government infrastructure in Israel, Kuwait, and the United States; educational platforms like Clever and Moodle; Microsoft services; and various Western-aligned organizations reflecting anUnited StatesTheir targets have included government infrastructure in Israel, Kuwait, and the United States; educational platforms like Clever and Moodle; Microsoft services; and various Western-aligned organizations reflecting an
