[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmf1CEvRYtV2C82oSzi6EnJ6fSP831yvFHw8B2iVkUdE":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":18,"country":19,"suspected_sponsor":20,"target_industries":21,"target_countries":34,"incident_types":39,"references":41,"techniques":57,"technique_count":83,"created_at":84,"seoMetadata":85,"schemaOrg":89},"Molerats","molerats",[9,10,11,12,13,14,15,16,17],"Gaza Hackers Team","Gaza cybergang","Gaza Cybergang","Operation Molerats","Extreme Jackal","Moonlight","ALUMINUM SARATOGA","G0021","BLACKSTEM","In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its entire police force and banned the use of USB memory sticks. Security researchers subsequently linked these attacks to a broader, yearlong campaign that targeted not just Israelis but Palestinians as well. and as discovered later, even the U.S. and UK governments. Further research revealed a connection between these attacks and members of the so-called “Gaza Hackers Team.” We refer to this campaign as “Molerats.”","PS","Palestine",[22,23,24,25,26,27,28,29,30,31,32,33],"Government","Defense","Energy","Finance","Healthcare","Pharmaceuticals","Education","Media","NGOs","Civil Society","Legal","Military",[35,36,20,37,38],"United States","Israel","Middle East","Europe",[40],"Espionage",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56],"https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2013\u002F08\u002Foperation-molerats-middle-east-cyber-attacks-using-poison-ivy.html","https:\u002F\u002Fti.360.net\u002Fblog\u002Farticles\u002Fsuspected-molerats-new-attack-in-the-middle-east\u002F","https:\u002F\u002Fti.360.net\u002Fblog\u002Farticles\u002Fsuspected-molerats-new-attack-in-the-middle-east-en\u002F","https:\u002F\u002Fmiddle-east-online.com\u002Fen\u002Fcyber-war-gaza-hackers-deface-israel-fire-service-website","https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2014\u002F06\u002Fmolerats-here-for-spring.html","https:\u002F\u002Fpwc.blogs.com\u002Fcyber_security_updates\u002F2015\u002F04\u002Fattacks-against-israeli-palestinian-interests.html","https:\u002F\u002Fwww.vectra.ai\u002Fblogpost\u002Fmoonlight-middle-east-targeted-attacks","https:\u002F\u002Fsecurelist.com\u002Fgaza-cybergang-wheres-your-ir-team\u002F72283\u002F","https:\u002F\u002Fwww.clearskysec.com\u002Fwp-content\u002Fuploads\u002F2016\u002F01\u002FOperation%20DustySky_TLP_WHITE.pdf","https:\u002F\u002Fwww.clearskysec.com\u002Fwp-content\u002Fuploads\u002F2016\u002F06\u002FOperation-DustySky2_-6.2016_TLP_White.pdf","https:\u002F\u002Fsecurelist.com\u002Fgaza-cybergang-updated-2017-activity\u002F82765\u002F","https:\u002F\u002Fwww.kaspersky.com\u002Fblog\u002Fgaza-cybergang\u002F26363\u002F","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0021\u002F","https:\u002F\u002Fwww.secureworks.com\u002Fresearch\u002Fthreat-profiles\u002Faluminum-saratoga","https:\u002F\u002Fservices.google.com\u002Ffh\u002Ffiles\u002Fmisc\u002Ftool-of-first-resort-israel-hamas-war-cyber.pdf",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],"T1059","T1547","T1547.001","T1059.001","T1059.005","T1059.007","T1555","T1555.003","T1140","T1105","T1027","T1027.013","T1566","T1566.001","T1566.002","T1057","T1053","T1053.005","T1553","T1553.002","T1218","T1218.007","T1204","T1204.001","T1204.002",25,"2023-08-09T17:25:09.409843+00:00",{"title":86,"metaDescription":87,"keywords":88},"Molerats Threat Actor Profile | Precursor Intelligence","In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its e...","Molerats, Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight, ALUMINUM SARATOGA, G0021, BLACKSTEM, threat actor, APT, cyber threat, threat intelligence, Government, Defense, Energy, Palestine, PS",{"@context":90,"@type":91,"name":6,"alternateName":92,"description":18,"url":93,"mainEntityOfPage":94,"location":96},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13,14,15,16,17],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fmolerats",{"@type":95,"@id":93},"WebPage",{"@type":97,"name":19},"Country"]