{
	"id": "8a58d1e7-69d3-4ab8-9272-1e49d46da8df",
	"created_at": "2026-04-06T00:17:09.414932Z",
	"updated_at": "2026-04-10T13:13:05.062959Z",
	"deleted_at": null,
	"sha1_hash": "1899d9756b1c5691e8a95b196981002c61720ec8",
	"title": "Iraqi hacker group 'ALtahrea Team' targets Israeli IT, e-commerce companies in major cyber attack: Reports",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 36971,
	"plain_text": "Iraqi hacker group 'ALtahrea Team' targets Israeli IT, e-commerce\r\ncompanies in major cyber attack: Reports\r\nBy Presstv\r\nPublished: 2022-07-27 · Archived: 2026-04-02 10:56:05 UTC\r\nA group of Iraqi hackers has reportedly targeted the website of a number of Israeli companies involved in\r\nthe information technology sector as well as electronic purchase or sale of products on online services or\r\nover the Internet. \r\nSocial media activists said various Israeli websites are currently offline due to a widespread cyber attack that took\r\nplace on Tuesday and was perpetrated by an Iraqi hacker group calling itself \"ALtahrea Team.\"\r\nAmong the affected sites are the Lifters website, the Nadlan World website, and the website of the Liam Group.\r\nIraqi hackers posted a picture of Iran's top anti-terror commander Lieutenant General Qassem Soleimani, who was\r\nassassinated along with his Iraqi comrade Abu Mahdi al-Muhandis, the second-in-command of Iraq’s Popular\r\nMobilization Units (PMU), in a US drone strike authorized by former president Donald Trump near Baghdad\r\nInternational Airport on January 3, 2020.\r\nThey also placed a tab in order to play the official anthem of the Iraqi PMU, better known by the Arabic word\r\nHashd al-Sha’abi, on the defaced Israeli websites.\r\nSabereen News, a Telegram news channel associated with Hashd al-Sha’abi, reported on July 11 that ALtahrea\r\nTeam had managed to break into the Tel Aviv municipality website and take it down, a week after a similar cyber\r\nattack on NTA Metropolitan Mass Transit System Ltd., which is responsible for the design and construction of a\r\nmass transit system in the coastal Israeli city.\r\n“Does not work; it's suspended by order of General Qassem Soleimani,” read the message posted on the Tel Aviv\r\nMunicipality website at the time it was hacked.\r\nIsrael’s NTA Metropolitan Mass Transit System Ltd, the company building the light rail network for the Tel Aviv\r\narea, said earlier this month that its website was temporarily disrupted by a foreign cyberattack. \r\nSabereen News said then that a group based in the Arab country had targeted the company, affecting its operating\r\nsystems, control monitors, and servers.  \r\nBack on June 28, two groups of Iraqi hackers targeted the website of Israeli digital intelligence\r\ncompany Cellebrite, which provides solutions for retrieving information from electronic devices and analyzing the\r\ndata.\r\nLebanon’s Arabic-language al-Mayadeen television news network reported that Iraqi hackers were behind the\r\ncyber attack that temporarily took down the Petah Tikva-based company’s website.\r\nhttps://www.presstv.ir/Detail/2022/07/27/686324/Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT,-e-commerce-companies-with-major-cyber-attack\r\nPage 1 of 2\n\nThe targeting apparently came in the form of a Distributed Denial of Service (DDoS) attack, during which a\r\nwebsite is targeted by overwhelming its servers with too many requests to connect.\r\nSource: https://www.presstv.ir/Detail/2022/07/27/686324/Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT,-e-commerce-companies-with\r\n-major-cyber-attack\r\nhttps://www.presstv.ir/Detail/2022/07/27/686324/Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT,-e-commerce-companies-with-major-cyber-attack\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MISPGALAXY",
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://www.presstv.ir/Detail/2022/07/27/686324/Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT,-e-commerce-companies-with-major-cyber-attack"
	],
	"report_names": [
		"Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT,-e-commerce-companies-with-major-cyber-attack"
	],
	"threat_actors": [
		{
			"id": "75108fc1-7f6a-450e-b024-10284f3f62bb",
			"created_at": "2024-11-01T02:00:52.756877Z",
			"updated_at": "2026-04-10T02:00:05.273746Z",
			"deleted_at": null,
			"main_name": "Play",
			"aliases": null,
			"source_name": "MITRE:Play",
			"tools": [
				"Nltest",
				"AdFind",
				"PsExec",
				"Wevtutil",
				"Cobalt Strike",
				"Playcrypt",
				"Mimikatz"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "b07fec96-80cd-4d92-aa52-a26a0b25b7c2",
			"created_at": "2022-10-25T16:07:23.826594Z",
			"updated_at": "2026-04-10T02:00:04.760416Z",
			"deleted_at": null,
			"main_name": "Madi",
			"aliases": [
				"Mahdi"
			],
			"source_name": "ETDA:Madi",
			"tools": [
				"Madi"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "f07ed87c-33ca-44a8-a362-7d5ea193aa7b",
			"created_at": "2023-11-08T02:00:07.123499Z",
			"updated_at": "2026-04-10T02:00:03.419917Z",
			"deleted_at": null,
			"main_name": "Altahrea Team",
			"aliases": [],
			"source_name": "MISPGALAXY:Altahrea Team",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434629,
	"ts_updated_at": 1775826785,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/1899d9756b1c5691e8a95b196981002c61720ec8.pdf",
		"text": "https://archive.orkl.eu/1899d9756b1c5691e8a95b196981002c61720ec8.txt",
		"img": "https://archive.orkl.eu/1899d9756b1c5691e8a95b196981002c61720ec8.jpg"
	}
}