OpIslam

#OpIslam Activity Observed in Reaction to Events on the Ground

Target: Governmental sites and major corporations in Muslim majority nations.
Attack Vector: Server targeting, DDoS attacks.
Threat Actor: @EZRA; @BLASTER.
Summary: As predicted, #OpIslam has seen an increase in activity towards the end of May. The rise comes with attacks predominantly originating from Israel, the primary nation with an interest in the campaign, as a counter for the #OpIsrael campaign carried out by many pro-Palestinian and Iranian groups against Jerusalem. Israel has countered the rise of attacks seen in May due to Holocaust Remembrance Day, the opening of the US embassy in Israel and the 70th anniversary of the Jewish state. Activity against Israel remained high after this due to Palestinian-Israeli clashe,s as well as tensions between Israel and Iran due to the uncertainty regarding the Iran nuclear deal and the situation in Syria. The response we have been expecting for some weeks has now materialised with targets in Palestine and Iran struck by cyber attacks originating from Israel.
Risk assessment summary: The threat is assessed as 4b LOW. While these attacks under the #OpIslam banner do not directly affect business for Western nations, retaliatory attacks could well do so. The more sophisticated operations such as intelligence gathering could put data at risk for Western nations with much communication between the US and Britain with allies such as Israel and Saudi Arabia. Despite this, the likelihood of this is low from a hacktivist perspective and attacks which affect Western nations are likely to be of a lower sophistication.

OpIsrael

OpIsrael prepares for key event amongst constant activity

Target: Israeli government as well as state-owned and affiliated groups

 

Attack Vector: DDoS attacks, site defacement/hacking, data leaks

Threat Actor: Various, particularly @MCADDoSTeam as well as @LorianSynaro

Summary: We have continued to observe steady activity in the #OpIsrael campaign, most notably originating from @MCADDoSTeam as well as @LorianSynaro. Attacks on the Israeli government have been observed and this type of operation can be expected to peak with Holocaust Remembrance Day period. The most recent incarnation has been dubbed #OpIsrael2018 and is expected to carry on through to the 14th of April. Risk assessment summary: The threat is assessed as 3d MODERATE. While there have been instances of governmental affiliated organisations being targeted, much of the focus is on the government itself. However, there has been evidence of medical organisations in particular being targeted, raising the risk in that sector. There is a high chance these attacks will continue, even after the end of #OpIsrael2018, with events on the ground contributing to increased cyber activity as well as the potential for tit-for-tat attacks between Israel and Arab league countries, particularly under the #OpIslam banner.