Syrian Electronic Army is a apt_group tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed July 6, 2026; most recent activity July 7, 2026.
On July 6, 2026, multiple U.S. Army subdomains, including oil.army.mil and ai2c.army.mil, were defaced in a 404 hijacking campaign. The attack displayed messages denouncing President Donald Trump and supporting Kurdish…