Ynetnews Israel Faces Surge in Geopolitical DDoS Attacks Amid Iran Conflict
Article Content
- •Israel accounted for 16.9% of global hacktivist DDoS attacks in H1 2026.
- •The conflict with Iran significantly escalated the frequency of cyberattacks.
- •Government organizations were the primary targets, suffering 37.2% of all attacks.
In the first half of 2026, Israel was the target of 784 DDoS attacks attributed to geopolitical hacktivist groups, accounting for 16.9% of such attacks globally. This marked an increase from 12.2% in 2025, with the conflict with Iran acting as a catalyst for the surge. The number of attacks against Israel more than doubled that of Ukraine, which recorded 390 attacks. A significant spike occurred in March 2026, with over 1,300 attacks claimed by hacktivist groups, driven by the escalation of military actions involving the U.S. and Israel against Iran. The attacks primarily aimed to disrupt essential services and government websites, causing immediate visibility of disruption. The hashtag #OPISRAEL was prominently used across various channels, indicating the mobilization of numerous hacktivist groups, including pro-Russian and anti-Western actors. Government organizations were the most targeted, representing 37.2% of the attacks. The overall increase in DDoS attacks reflects a broader trend of digital warfare linked to geopolitical tensions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track NoName057 and Amazon Web Services in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…