- Category
- Hacktivist · Political or nationalist, often disruption and leaks.
- Origin
- Iran(high confidence)
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0690 · cyber-islamic-resistance
What it is
Cyber Islamic Resistance is a hacktivist collective ideologically aligned with Iran, engaging in operations such as website defacements, DDoS attacks, and data exfiltration targeting Israeli and Western entities. They have claimed breaches of Israeli cybersecurity firms and academic platforms, framing their actions as part of a broader narrative of retaliation. The group has also targeted critical infrastructure, asserting access to industrial control systems and operational technology environments. Their activities are often presented as part of a coordinated cyber mobilization campaign, emphasizing psychological and reputational impacts.
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Tools
The tools and malware families the sources tie to it.
- Cyber Eye RAT
- CyberGate
- MobileOrder
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de