← All Threat Actors
Threat Actor Profile

Molerats

ALUMINUM SARATOGA BLACKSTEM Extreme Jackal G0021 Gaza cybergang Gaza Hackers Team Moonlight Operation Molerats
▲ High Threat
In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its entire police force and banned the use of USB memory sticks. Security researchers subsequently linked these attacks to a broader, yearlong campaign that targeted not just Israelis but Palestinians as well. and as discovered later, even the U.S. and UK governments. Further research revealed a connection between these attacks and members of the so-called “Gaza Hackers Team.” We refer to this campaign as “Molerats.”
Origin Palestine
Sponsor Palestine
Motivation Espionage

Target Sectors

Government Defense Energy Finance Healthcare Pharmaceuticals Education Media NGOs Civil Society Legal Military

Known TTPs

Msiexec
Malicious Link
Ingress Tool Transfer
Code Signing
Compression
Scheduled Task
Deobfuscate/Decode Files or Information
Spearphishing Attachment
Process Discovery
Spearphishing Link
Credentials from Web Browsers
Registry Run Keys / Startup Folder
PowerShell
Visual Basic
JavaScript
Malicious File

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD