{
	"id": "035ae4aa-b396-47a9-a4a0-55b6e46dd3d1",
	"created_at": "2026-04-14T02:20:56.18227Z",
	"updated_at": "2026-04-14T17:01:15.093778Z",
	"deleted_at": null,
	"sha1_hash": "8443f427f3594e9c497169e425721ee286b2a331",
	"title": "Evolving Cyber Dynamics Amidst the Israel-Hamas Conflict - Check Point Blog",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 58419,
	"plain_text": "Evolving Cyber Dynamics Amidst the Israel-Hamas Conflict -\r\nCheck Point Blog\r\nBy etal\r\nPublished: 2023-10-30 · Archived: 2026-04-14 02:00:33 UTC\r\nHighlights:\r\nPro-Palestinian cyber activists have broadened their scope beyond Israel, targeting countries\r\nperceived as Israeli allies in the war against Hamas.\r\nThe cyber operations mainly serve as informational and retaliatory tactics, with limited reported\r\ndamage.\r\nTarget selection is influenced by previously established focus areas of these groups and evolving\r\ngeopolitical events.\r\nAs the war between Israel and Hamas, named “Iron Swords,” commenced on the morning of October 7, it also\r\nmarked the beginning of intensified cyber engagements from various threat actors.\r\nIn our prior analysis, which explored cyber incidents in connection with the Israeli-Hamas war, we primarily\r\nexamined attacks targeting Israeli interests. Yet, as the conflict has unfolded, nations expressing support for Israel\r\nhave also been drawn into the cyber fray.\r\nIn our prior blog post, which addressed the cyber incidents intertwined with the ongoing Israeli-Hamas war, we\r\nfocused on cyberattacks directed at Israeli entities. However, Israel has not remained the hacktivists’ exclusive\r\ntarget. Since the beginning of the conflict, in particular as foreign leaders expressed their solidarity with Israel,\r\nadditional nations were added to the roster of potential targets.\r\nUnlike in the Russian-Ukrainian conflict, where a shift in focus towards third-party nations took months, for\r\nRussian-affiliated groups like Killnet to reorient their focus towards non-Ukrainian targets, in this instance, cyber\r\ngroups have swiftly transitioned to these new targets immediately following statements of solidarity with Israel.\r\nThese groups have often reoriented their efforts towards their established targets, albeit reframed under the context\r\nof the current conflict.\r\nThe United States, France, India, and more recently, Italy have seen a notable uptick in cyber activities against\r\nthem. French digital infrastructure, for instance, experienced over 300 incidents, predominantly DDoS attacks and\r\nwebsite defacements with minimal impact.\r\nAttacks Timeline and Examples\r\nAttacks Timeline and Examples\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 1 of 8\n\nSimultaneously with the war’s commencement, several cyber groups announced their intentions to engage\r\ndigitally. Mysterious Team Bangladesh, a group that has regularly participated in various cyber operations against\r\nFrance for its colonialist past, as well as against India and Sri Lanka, declared its readiness to initiate cyberattacks\r\nagainst Israeli targets and promoted collective action with the hashtag #OpIsraelV2.\r\nOpIsraelV2\r\nThis team collaborated with “Team_insane_Pakistan,” exchanging target information and successes. Their attacks\r\ntargeted various Israeli entities including the space agency, port authorities, media outlets, the Israel Defense\r\nForces (IDF), and financial institutions, yet the inflicted damage was minimal.\r\nBy October 8, a mere day after hostilities began, cyber collectives signaled that countries aligned with Israel\r\nwould be subject to their campaigns.\r\nBy October 9, numerous claims of cyberattacks on U.S. entities emerged, correlated to the United States’ support\r\nfor Israel. Pro-Palestinian channels have since been rife with discussions of over 60 such incidents.\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 2 of 8\n\nThe EU’s suspension of financial aid to the Palestinians on October 10 led to a flurry of cyber operations targeting\r\nEuropean organizations.\r\nhttps://www.euronews.com/my-europe/2023/10/09/brussels-backs-israels-right-to-self-defence-as-it-halts-aid-to-palestinians\r\nIn response, several groups asserted that they had directed their efforts toward European entities.\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 3 of 8\n\nOther targeted entities included the Central European University, EU GDPR site, EU Parliament programs and\r\nmore. The rationale behind these attacks was articulated by another actor, SYLHET GANG-SG. France was\r\noverall the most targeted country with more than 300 reports of attack listings.\r\nAlthough there is a certain degree of correlation between target allocation and recent news events, the selection of\r\ntargets was also influenced by factors such as availability and the group’s prior activities. For example, groups like\r\n“Cyber error system,” which typically concentrate their efforts in Asia, particularly India, continued to maintain\r\ntheir focus on the region. They justified their ongoing attacks by citing the ongoing conflict as a rationale. The\r\nnumber of attacks on India exceeded 230.\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 4 of 8\n\nAs various world leaders arrived in Israel for discussions and to show solidarity, their countries received special\r\nattention from the attackers.\r\nDuring his visit to Israel on October 17, German Chancellor Scholz declared, “Israel: Germany is at your side.” In\r\nresponse to this statement, reports of Distributed Denial of Service (DDoS) attacks targeting German entities\r\nincreased. These attacks claims included airline organizations such as German Airways  and others.\r\nHowever, many of these attack declarations did not wait for official visits. In fact, many of the attacks on Western\r\ntargets occurred before the visits of notable figures such as US President Biden on October 18, UK Prime Minister\r\nSunak on the 19th, and French Prime Minister Macron on the 24th. For example, Prime Minister Sunak’s personal\r\nwebsite experienced a DDoS attack by the hacktivist actor SYLHET GANG-SG. Similar attacks were also\r\nlaunched against the Cyprus police, several Canadian entities, the British military, and other targets.\r\nCyprus president post\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 5 of 8\n\nEven UNICEF has been listed as one of their targets.\r\nUNICEF post\r\nArab nations that did not declare their clear support for the Palestinians faced criticism and, in some cases, came\r\nunder cyberattacks.\r\nTargeted Islamic entities included the Organization of Islamic Cooperation (OIC), who were lambasted for their\r\nlack of assistance.\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 6 of 8\n\nStarting on October 23, over the past few days, there has been a notable emphasis on targeting Italian entities. This\r\nhas manifested in disruptions at several Italian airports and governmental ministries, including the Italian Ministry\r\nof Foreign Affairs office, municipalities, the Office for Digital Italy, Italian banks, AeroItalia, news agencies, the\r\nItalian Acosta airport, the Italian Bari Karol Wojtyła Airport website, Italy Calabrian Airports Systems website,\r\nand the Naples International Airport website.\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 7 of 8\n\nConclusion\r\nThe digital landscape serves as a mirror to geopolitical tensions, with hacktivist groups rapidly adapting their\r\nstrategies to reflect the unfolding developments on the global stage. The ongoing war between Israel and Hamas\r\nshowcases this dynamic, with the scope of cyber operations extending well beyond the immediate theater of war.\r\nThese collectives, highly attuned to political shifts, leverage cyber tactics to influence public perception and\r\nnational policies.\r\nThe cyberattacks, primarily through DDoS campaigns and website defacement, have targeted a diverse array of\r\nentities — from national infrastructure to individual political figures’ digital assets. Each operation carries a\r\nmessage, an attempt to disrupt the normalcy of digital operations and to signal the hacktivists’ presence in the\r\nglobal conversation.\r\nWhile the direct damage inflicted by these cyberattacks remains relatively contained, the broader implications are\r\nsignificant. The persistence and evolving nature of these threats underscore the need for robust cybersecurity\r\nmeasures. Nations and organizations must recognize the complex interplay between physical conflicts and their\r\ndigital counterparts. As such, a proactive approach in cyber defense is not just prudent; it is imperative to\r\nsafeguard against the cascading effects of these targeted operations.\r\nThis landscape of cyber warfare serves as a stark reminder that in our interconnected world, allegiances and\r\nactions have consequences that reverberate through the digital ether. It is a call to action for continual vigilance,\r\nimproved cybersecurity collaboration, and strategic responses that can adapt as quickly as the threat actors\r\nthemselves. As we observe the meticulous execution of these cyber operations, it becomes clear that in the theater\r\nof modern conflict, the digital front is as critical as the physical one.\r\nSource: https://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nhttps://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/\r\nPage 8 of 8",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MISPGALAXY"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://blog.checkpoint.com/security/evolving-cyber-dynamics-amidst-the-israel-hamas-conflict/"
	],
	"report_names": [
		"evolving-cyber-dynamics-amidst-the-israel-hamas-conflict"
	],
	"threat_actors": [
		{
			"id": "dafc166f-0946-4870-9f6e-46ce02d2a40f",
			"created_at": "2024-11-13T13:15:31.105216Z",
			"updated_at": "2026-04-14T02:00:04.158999Z",
			"deleted_at": null,
			"main_name": "SYLHET GANG-SG",
			"aliases": [],
			"source_name": "MISPGALAXY:SYLHET GANG-SG",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "b4a6d558-3cba-499c-b58a-f15d65b7a604",
			"created_at": "2023-01-06T13:46:39.346924Z",
			"updated_at": "2026-04-14T02:00:03.653906Z",
			"deleted_at": null,
			"main_name": "Killnet",
			"aliases": [],
			"source_name": "MISPGALAXY:Killnet",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1776133256,
	"ts_updated_at": 1776186075,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/8443f427f3594e9c497169e425721ee286b2a331.pdf",
		"text": "https://archive.orkl.eu/8443f427f3594e9c497169e425721ee286b2a331.txt",
		"img": "https://archive.orkl.eu/8443f427f3594e9c497169e425721ee286b2a331.jpg"
	}
}