Molerats
threat actorPSalso known as
Other names and identifiers for this entity.
ATT&CK
Gaza Cybergang · Molerats · Operation Molerats
MISP
ALUMINUM SARATOGA · BLACKSTEM · Extreme Jackal · Gaza Hackers Team · Gaza cybergang · Molerats · Moonlight · Operation Molerats
In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its entire police force and banned the use of USB memory sticks. Security researchers subsequently linked these attacks to a broader, yearlong campaign that targeted not just Israelis but Palestinians as well. and as discovered later, even the U.S. and UK governments. Further research revealed a connection between these attacks and members of the so-called “Gaza Hackers Team.” We refer to this campaign as “Molerats.”
resolved ATT&CK groups
Threat groups associated with this.
techniques used (16)
ATT&CK techniques this enables or maps to.
software used (6)
Malware and tools associated with this.
references
External citations — patches, advisories, analysis.
- https://www.fireeye.com/blog/threat-research/2013/08/operation-molerats-middle-east-cyber-attacks-using-poison-ivy.html
- https://ti.360.net/blog/articles/suspected-molerats-new-attack-in-the-middle-east/
- https://ti.360.net/blog/articles/suspected-molerats-new-attack-in-the-middle-east-en/
- https://middle-east-online.com/en/cyber-war-gaza-hackers-deface-israel-fire-service-website
- https://www.fireeye.com/blog/threat-research/2014/06/molerats-here-for-spring.html
- https://pwc.blogs.com/cyber_security_updates/2015/04/attacks-against-israeli-palestinian-interests.html
- https://www.vectra.ai/blogpost/moonlight-middle-east-targeted-attacks
- https://securelist.com/gaza-cybergang-wheres-your-ir-team/72283/