• Middle East
• Israel
• Data Encrypted For Impact
• Business Services
• Handala
• Asia
• Jobinfo

Handala Claims Cyberattack on Israeli Recruitment Firm

On June 24, 2025, the pro-Palestinian hacktivist group Handala claimed responsibility for a cyberattack targeting Israel Job Info Ltd, a prominent Israeli recruitment and placement company. The group alleged it had exfiltrated 419 gigabytes of internal data, including resumes, employment contracts, internal communications, and client records, and published over 50,000 documents as proof of compromise. Additionally, They warned of additional leaks to come.

• Middle East
• Israel
• Data Encrypted For Impact
• Ben Horin & Alexandrovitz
• Business Services
• Handala
• Asia

Ben Horin Alexandrovitz Media Firm Alleged Breached by Handala

On June 22, 2025, the pro-Palestinian hacktivist group Handala claimed responsibility for a large-scale breach of Israeli media and communications firm Ben Horin Alexandrovitz Ltd. The group alleges to have exfiltrated 11 TB of internal data, released over 50,000 documents as proof of compromise and disrupted operations by wiping servers and accessing affiliated platforms. The attack was described as targeting the firm’s alleged ties to Israeli intelligence and psychological operations.

• Middle East
• Israel
• Data Encrypted For Impact
• Zachary Levi And Sons - Construction
• Business Services
• Handala
• Asia

Construction Firm Zacharia Levi Ltd Alleged Breached by Handala

On June 21, 2025, the pro-Palestinian hacktivist group Handala claimed responsibility for a breach targeting Israeli construction company Zacharia Levi Ltd. The group alleges to have exfiltrated the company’s entire database, including project files, contracts, financial documents, internal communications, and technical blueprints. Over 20GB of data was leaked as proof of compromise.

• Middle East
• Israel
• Data Encrypted For Impact
• Business Services
• Handala
• Sivim It
• Asia

Security Firm Sivim Alleged Breached by Handala

On June 20, 2025, the pro-Palestinian hacktivist group Handala claimed responsibility for a breach targeting Israeli cybersecurity firm Sivim IT. The group released two proof of compromise archival links.

• Middle East
• Mprest
• Israel
• Business Services
• Asia
• Digitalghost

DigitalGhost Claims Breach of Israeli Iron Dome Contractor

A threat actor operating under the alias "DigitalGhost" has claimed responsibility for allegedly breaching mPrest, an Israeli technology contractor allegedly involved in developing software for the Iron Dome missile defense system. According to the attacker, they managed to access a database containing personal information of individuals connected to the company. No official confirmation has been provided regarding the authenticity or scope of the breach.

• North America
• CVE-2025-24016
• Business Services
• Wazuh
• United States
• Cve-2025-24016
• Mirai

Exploitation of Wazuh Vulnerability by Mirai Botnet Variants

Researchers have reported that threat actors are exploiting a critical vulnerability (CVE-2025-24016) in Wazuh servers to deploy Mirai botnet variants for conducting distributed denial-of-service (DDoS) attacks. This vulnerability allows remote code execution and has been targeted shortly after its public disclosure in February 2025. The attacks involve two different botnets using malicious shell scripts to download Mirai payloads from external servers. The research indicates that the botnets are leveraging various exploits, including those targeting IoT devices, and have been found to particularly focus on devices in regions such as China, India, and several others. The ongoing exploitation of this vulnerability highlights the rapid response of botnet operators to newly published security flaws.