PSPalestineG0021

MoleratsMolerats

Also known as: Gaza Hackers Team · Gaza cybergang · Gaza Cybergang · Operation Molerats · Extreme Jackal · Moonlight · ALUMINUM SARATOGA · G0021 · BLACKSTEM · Molerats

Origin
PS
Known aliases
10
Target sectors
12
Attribution
State-sponsored

Profile

In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its entire police force and banned the use of USB memory sticks. Security researchers subsequently linked these attacks to a broader, yearlong campaign that targeted not just Israelis but Palestinians as well. and as discovered later, even the U.S. and UK governments. Further research revealed a connection between these attacks and members of the so-called “Gaza Hackers Team.” We refer to this campaign as “Molerats.”

Aliases· 10

Gaza Hackers TeamGaza cybergangGaza CybergangOperation MoleratsExtreme JackalMoonlightALUMINUM SARATOGABLACKSTEMMolerats
G0021

Target sectors· 12

GovernmentDefenseEnergyFinanceHealthcarePharmaceuticalsEducationMediaNGOsCivil SocietyLegalMilitary

Known victims· 5

  • United States
  • Israel
  • Palestine
  • Middle East
  • Europe

MITRE ATT&CK Group crosswalk

G0021

References

  1. https://www.fireeye.com/blog/threat-research/2013/08/operation-molerats-middle-east-cyber-attacks-using-poison-ivy.html
  2. https://ti.360.net/blog/articles/suspected-molerats-new-attack-in-the-middle-east/
  3. https://ti.360.net/blog/articles/suspected-molerats-new-attack-in-the-middle-east-en/
  4. https://middle-east-online.com/en/cyber-war-gaza-hackers-deface-israel-fire-service-website
  5. https://www.fireeye.com/blog/threat-research/2014/06/molerats-here-for-spring.html
  6. https://pwc.blogs.com/cyber_security_updates/2015/04/attacks-against-israeli-palestinian-interests.html
  7. https://www.vectra.ai/blogpost/moonlight-middle-east-targeted-attacks
  8. https://securelist.com/gaza-cybergang-wheres-your-ir-team/72283/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
MosesStaff
Actor
LulzSec Black
Actor
Handala
Actor
Volatile Cedar
Actor
Blackmeta
Actor
Altahrea Team
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.