Hacktivist Groups Use Website Defacements in Israel-Hamas Conflict
Summary
DarkOwl reports that pro-Palestinian groups defaced about 125 Israeli websites and 157 websites overall, and publicized claims of accessing systems and releasing data. The claims were not independently verified.
Key points
- DarkOwl says DragonForce Malaysia defaced about 125 websites with Israeli .il domains after the conflict began.
- Cyb3r_Drag0nz_Team reportedly defaced about 157 websites from October 8, 2023, targeting sites in Israel, the United States and other countries.
- The groups publicized their activity through defacement messages and social media accounts, including Telegram.
- The article says the groups also made claims of accessing Israeli telecommunications systems and releasing databases or information purportedly containing Israeli citizen data; these claims were not independently verified.
- DarkOwl describes defacement as a way to broadcast political messages and attract attention, generally without data theft or damage to underlying infrastructure.
Article Details
- Event Type
- Hacktivist website defacements and related activity during the Israel-Hamas conflict
- Impact
- The article reports that pro-Palestinian groups defaced websites, primarily Israeli sites, and also targeted victims in the United States and other countries. It describes claims of access to Israeli telecommunications systems and the release of information purported to contain Israeli citizen data. Defacements were characterized as primarily affecting website content and reputation rather than underlying infrastructure; the information was not independently verified.
MITRE ATT&CK
T1114 · Email CollectionThe article reports that groups released leaked databases or information purporting to contain Israeli citizen data.T1491 · DefacementThe article describes unauthorized modification of website content and appearance in defacement attacks.T1498 · Network Denial of ServiceThe article reports that DragonForce Malaysia has historically conducted distributed denial-of-service attacks.
Threat Actors
Cyb3r_Drag0nz_TeamA pro-Palestinian group reported to have conducted defacements against websites in Israel, the United States, and other countries, and to have released information purporting to contain Israeli citizen data.DragonForce MalaysiaA pro-Palestinian group that the article reports conducted defacements and historically carried out DDoS attacks; it also claimed access to Israeli telecommunications systems.X7rootA group reported to have defaced Israeli websites and posted anti-Israel content.