Iranian Hackers Target Israel in Destructive Attacks | Nov 6th 2023
Channel: Hacking Space Frontier
Date: 2023-11-07

The recent cyberattacks against Israeli organizations, attributed to an Iranian state-backed hacker group known as Agonizing Serpens, are part of a broader offensive campaign during Israel's conflict with Hamas. These attacks, as reported by U.S. cybersecurity firm Palo Alto Networks, involved the deployment of destructive malware. The group targeted primarily educational and technology organizations, aiming to steal sensitive data, such as personally identifiable information and intellectual property.

To further disrupt their targets, the hackers used wipers, a type of malware designed to delete or wipe out data. Researchers discovered three previously unknown wipers used in these attacks and identified a custom tool for extracting information from database servers.

Agonizing Serpens has been active since 2020 and is known for its destructive wiper and fake ransomware attacks. In these recent attacks, the group did not demand a ransom but sought to cause significant data loss and disrupt business continuity.

Israel has been a target for Iranian hackers, and there are concerns about potential escalation in cyberattacks on the country's infrastructure amid the Israeli-Palestinian conflict. Iran uses cyberattacks to project power, given the shared anti-Israel and anti-Western sentiments with its support for Hamas.

So far, the impact of suspected Iranian cyberattacks on publicly claimed targets in Israel has been minimal, but it remains a significant concern in the ongoing conflict. Israel's cyber defense chief aims to prevent cyberspace from becoming another front in the war with Hamas.