GINC-APT-0201 · Targeted, sponsor unknown

Ghost Jackal

Also AnonGhost.

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Unknown
Sources
7 sources carry it
Identifier
GINC-APT-0201 · ghost-jackal

What it is

AnonGhost is an apparent hacktivist collective. In October 2023, following a series of air- and land-based attacks in the Gaza Strip, AnonGhost was one of several hacktivist groups that claimed responsibility for disruptive attacks against computer networks in Israel. Researchers indicated that they observed AnonGhost actors exploit an undisclosed API vulnerability in Red Alert, an application that provides warning of projectile attacks in Israel, using Python scripts to intercept web requests and send spam messages to the app's users.<sup>[Group-IB Threat Intelligence Tweet October 9 2023]</sup>

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
AnonGhost

Tools

The tools and malware families the sources tie to it.

  • Archelaus Beta
  • Ghost
  • Xploit

Sources