GINC-APT-0690 · Hacktivist

Cyber Islamic Resistance

Category
Hacktivist · Political or nationalist, often disruption and leaks.
Origin
Iran(high confidence)
Sources
3 sources carry it
Identifier
GINC-APT-0690 · cyber-islamic-resistance

What it is

Cyber Islamic Resistance is a hacktivist collective ideologically aligned with Iran, engaging in operations such as website defacements, DDoS attacks, and data exfiltration targeting Israeli and Western entities. They have claimed breaches of Israeli cybersecurity firms and academic platforms, framing their actions as part of a broader narrative of retaliation. The group has also targeted critical infrastructure, asserting access to industrial control systems and operational technology environments. Their activities are often presented as part of a coordinated cyber mobilization campaign, emphasizing psychological and reputational impacts.

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Tools

The tools and malware families the sources tie to it.

  • Cyber Eye RAT
  • CyberGate
  • MobileOrder

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de