Molerats

    Palestinian TerritoriesState-sponsoredUnknown

    Observation period

    16

    Techniques

    0

    Reports

    Latest observed activity
    No dated reports available
    First observed
    —

    Profile

    In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its entire police force and banned the use of USB memory sticks. Security researchers subsequently linked these attacks to a broader, yearlong campaign that targeted not just Israelis but Palestinians as well. and as discovered later, even the U.S. and UK governments. Further research revealed a connection between these attacks and members of the so-called “Gaza Hackers Team.” We refer to this campaign as “Molerats.”

    Relevance for Germany, Austria and Switzerland

    medium

    Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).

    Target sectors according to source

    • Government
    • Defense
    • Energy
    • Finance
    • Healthcare
    • Pharmaceuticals
    • Education
    • Media
    • NGOs
    • Civil Society
    • Legal
    • Military

    Target countries according to source United States, Israel, Palestine, Middle East, Europe

    Aliases

    • Gaza Hackers Team
    • Gaza cybergang
    • Operation Molerats
    • Extreme Jackal
    • Moonlight
    • ALUMINUM SARATOGA
    • BLACKSTEM

    MITRE ATT&CK techniques

    Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.

    Software / tooling used

    External references

    Back to group overview