Theregister Pro-Iran Hacktivist Group Launches DDoS Attack on Canonical's Ubuntu Infrastructure
Article Content
- •A pro-Iran hacktivist group launched a DDoS attack on Canonical's infrastructure.
- •The attack disrupted Ubuntu updates and affected multiple Canonical services.
- •The attackers are using a DDoS-for-hire service, indicating a shift towards extortion.
On April 30, 2026, a coordinated DDoS attack targeted Canonical, the company behind the Ubuntu Linux distribution, disrupting its web infrastructure and preventing users from accessing updates. The attack was claimed by a hacktivist group known as The Islamic Cyber Resistance in Iraq, or 313 Team, which announced the assault via their Telegram channel. The attack has resulted in widespread outages, affecting Canonical's main website and several subdomains, with users unable to download or update Ubuntu. The attackers reportedly utilized a DDoS-for-hire service called Beamed, capable of launching attacks exceeding 3.5 Tbps. As of May 1, 2026, the attack has persisted for over 20 hours, with Canonical working to restore services. The group has also indicated a shift towards extortion, threatening continued attacks unless demands are met. This incident highlights vulnerabilities in open-source systems and the risks posed by DDoS-for-hire services.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (14)
Following this threat?
Track bluesky, 313 Team and Canonical in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Pro-Iran Hackers Target Azerbaijan in DDoS Attack Over Hijab Ban On October 13, 2026, Azerbaijan's state information infrastructure was targeted by a large-scale cyberattack attributed to the pro-Iranian hacker group '313 Team'. The attack, described as a distributed denial-of-service (DDoS) operation, affected over 100 government domains, including key ministries. The group… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…