DieNet Network
DieNet Network is a hacktivist threat actor identified in the provided reporting as active during the February 28 to March 1, 2026 Middle East cyber escalation following joint US-Israeli strikes on Iran. The group is described as leading large-scale distributed denial-of-service (DDoS) campaigns framed explicitly as retaliation for Operation Epic Fury. Reported targets included government portals, telecom providers, airports, and financial institutions across Bahrain, Qatar, the UAE, Kuwait, Saudi Arabia, and the United States. In the broader incident set described in the source material, hacktivist activity during this period was dominated by DDoS, website defacement, and claimed data-breach operations, but DieNet Network is specifically tied in the content to DDoS activity. The content also references the name "DieNet Network V5" in mention context. No high-confidence attribution to a nation-state is directly stated in the provided content.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Financial Services
- Telecommunication Services
- Transportation
Where they target
Geographies tied to known operations.
- 🇧🇭 Bahrain
- 🇶🇦 Qatar
- 🇦🇪 United Arab Emirates
- 🇰🇼 Kuwait
- 🇸🇦 Saudi Arabia
- 🇺🇸 United States
Where they're from
Attributed origin per open-source reporting.
- IR
Tradecraft
3 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
Recent activity
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Pro-Iranian hacktivist group conducting large-scale retaliatory DDoS operations against government, telecom, airport, and financial targets.
Hacktivist group conducting/claiming large-scale retaliatory DDoS campaigns aligned with pro-Iran narratives, targeting government, telecom, aviation, and financial services across GCC states and the US.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.