Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Back to intelligence
hacktivist-operationoperational-disruptiongovernment-diplomatic-threatcritical-infrastructure-threat

Hacktivist Campaigns and Defacements Spread Across the Israel-Hamas War

Updated 29d agoFirst seen May 25, 20267 sources

Hacktivist groups rapidly turned the Israel-Hamas war into a parallel cyber conflict, launching DDoS attacks, website defacements, data leak claims, and disruptive messaging operations against media outlets, government sites, private companies, and public-facing services. Reports said the Jerusalem Post suffered outages, the Israeli Red Alert missile warning app was targeted, and broader campaigns such as #OpIsrael and OpsRise mobilized pro-Palestinian, pro-Russian, and other aligned actors against Israeli targets. Researchers also noted retaliatory activity by pro-Israel groups against Palestinian entities, while spillover attacks hit organizations in countries seen as backing one side or the other.

The activity extended beyond websites into physical and operational systems. Attackers reportedly hijacked Israeli smart billboards to display pro-Hamas messages, while analysts warned that opportunistic actors were probing critical infrastructure and operational technology tied to power, water, fuel, and ISP networks. Cybersecurity firms and news outlets described the campaign as dominated by loosely coordinated hacktivist collectives, with pro-Palestinian groups outnumbering pro-Israel actors and some cybercriminals joining the fray. At the same time, the Israel-linked group Predatory Sparrow resurfaced amid the fighting, underscoring concerns that more capable state-aligned or advanced threat actors could deepen the conflict's cyber dimension.

Share:
Hacktivist Campaigns and Defacements Spread Across the Israel-Hamas War
Stay ahead

Get ahead of threats like this

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.

EVENT TIMELINE

How this story unfolded

10 events from the most recent confirmed update back to the earliest known activity.

10 EVENTS
Oct 18, 20233y ago

Researchers assess broad cyber spillover and critical infrastructure risk

A CYFIRMA report described a sharp escalation in cyber activity tied to the war, including attacks on government entities, media, private organizations, and infrastructure-related targets such as power, water, fuel, and ISP systems. The report also assessed that pro-Palestinian hacktivist groups outnumbered pro-Israel groups and warned that APT involvement was likely though not yet confirmed.

Oct 13, 20233y ago

Hackers compromise Israeli smart billboards with pro-Hamas messages

Attackers infiltrated smart billboards in Israel and displayed pro-Hamas messages. The incident showed the conflict extending beyond websites into connected public-facing systems.

Oct 10, 20233y ago

Predatory Sparrow reemerges amid Gaza fighting

CyberScoop reported the reemergence of the Israel-linked hacking group Predatory Sparrow during the Gaza fighting. Its return raised attention to the possible involvement of more sophisticated actors beyond hacktivist groups.

Oct 8, 20233y ago

Delhi government websites hit in retaliatory DDoS attacks

After Indian Cyber Force's reported operations against Palestinian targets, Delhi government websites were subjected to retaliatory DDoS attacks. The incident illustrated how the cyber conflict spread to states perceived as backing one side.

Indian Cyber Force targets Palestinian websites and bank

The pro-India, pro-Israel group Indian Cyber Force reportedly attacked Palestinian targets including the Hamas website and Palestine National Bank. The activity marked spillover beyond local actors directly tied to Israel and Gaza.

Israeli government and commercial sites face claimed attacks

Multiple hacktivist groups, including Garnesia Team, ACEH Hackers Group, Team Herox, Ganosec Team, and KEP Team, claimed attacks on Israeli government and commercial websites. The activity reflected a widening set of opportunistic and politically motivated actors joining the conflict.

Pro-Palestinian campaigns #OpIsrael and OpsRise intensify

Hacktivist actors promoted coordinated pro-Palestinian cyber campaigns under banners including #OpIsrael and OpsRise. These operations focused on Israeli online infrastructure and helped broaden the conflict's cyber dimension.

Red Alert missile warning app reportedly targeted

The Israeli Red Alert missile warning application was reportedly targeted in a cyberattack during the early days of the conflict. Anon Ghost was cited in reporting as claiming involvement.

Jerusalem Post hit by cyberattacks causing outages

The Jerusalem Post suffered cyberattacks that disrupted access to its website. Anonymous Sudan was reported as claiming responsibility for the attack.

Oct 7, 20233y ago

Hamas attack triggers surge of hacktivist cyber activity

Following the outbreak of the Israel-Hamas war, hacktivist groups aligned with both sides began launching cyber operations tied to the conflict. Reporting describes a rapid escalation into DDoS attacks, website defacements, data leaks, and disruptive campaigns against Israeli and Palestinian targets.

The operational view lives in Mallory

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t — which of your assets are affected, which threat actors are using it right now, which detections to deploy, and what to do next.
Exposure mapping

Map indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidence

Every observed campaign, victim, and pivot linked to actors named in this story.

Associated malware

Malware, exploits, and IOCs connected to the activity described here.

Detection signatures

YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alerts

Get matching new stories delivered to your team as they break — not the next morning.

AI threads

Ask questions about this story and take action on the answers.

Hacktivist Campaigns and Defacements Spread Across the Israel-Hamas War | Mallory