DarkOwl Reviews Cyber Activity During First Two Months of Israel-Hamas Conflict
Summary
DarkOwl reviews reported cyber activity during the first two months of the Israel-Hamas conflict, including hacktivist threats and attack claims, a reported spoof attack on Israel’s RedAlert app, and alleged data theft and breaches.
Key points
- DarkOwl says hacktivist activity included DDoS attacks, website defacements, and data-leak claims targeting both sides of the conflict.
- A leak purportedly from the Palestinian Foreign Ministry, posted on cracking[.]org, reportedly included project details, correspondence, and personal information for about 500 people.
- The RedAlert app was reportedly targeted in a spoof attack that may have collected personal information; the article says the actor was unclear.
- Stucx Team claimed to have attacked an Israeli SCADA system, while GhostSec later claimed to have targeted Israeli programmable logic controllers (PLCs).
- Reports cited by DarkOwl said pro-Hamas hacktivists used wiper malware and that Iranian hackers and a Hamas-linked group used new tools; the article gives limited technical detail.
- In December, hackers reportedly stole IDF patient records in an attack on an Israeli hospital; Cyber Toufan separately claimed it breached SodaStream and exfiltrated 100,000 records. These claims are not independently confirmed in the article.
Article Details
- Event Type
- Cyber activity and hacktivist attacks associated with the Israel-Hamas conflict, including reported DDoS attacks, website defacements, data leaks, alleged system compromises, and malware targeting.
- Impact
- Reported impacts included website disruptions and defacements, publication or alleged theft of personal and organizational data, and claims of attacks on Israeli SCADA systems and PLCs. The article notes that some claims and reports were unverified or unclear, including the RedAlert app spoof attack and claims involving Mossad information and SodaStream records.
Threat Actors
BlackSecSaid it would target Israel.Dragon Force MalaysiaClaimed responsibility for targeting and defacing several Israeli websites.Ghosts of PalestineAnnounced plans to target NATO countries supporting Israel, with Turkey excluded.R_70Described as a pro-Hamas hacktivist group; claimed it took down the JFK website.Stucx TeamClaimed an attack on an Israeli SCADA system.
Products
Countries
IsraelIt has been 2 months since Hamas’s October 7th surprise attack on Israel.PalestineA number of groups emerged in the aftermath of the attack pledging their support to either Hamas, Palestine or Israel and cyberattacks increased in the region targeting both sides to varying degrees of sophistication.TurkeyGhosts of Palestine openly announced they will target NATO countries who support Israel although Turkey was excluded from targeting.