Savvy Israel-linked hacking group reemerges amid Gaza fighting | CyberScoop<\/title> <meta name=\"description\" content=\"Predatory Sparrow, which has been linked to an attack on an Iranian steel facility last year, reemerged after a long hiatus Monday.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/predatory-sparrow-israel-gaza-cyber\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Savvy Israel-linked hacking group reemerges amid Gaza fighting\"> <meta property=\"og:description\" content=\"Predatory Sparrow, which has been linked to an attack on an Iranian steel facility last year, reemerged after a long hiatus Monday.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/predatory-sparrow-israel-gaza-cyber\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2023-10-10T20:36:52+00:00\"> <meta name=\"author\" content=\"AJ Vicens\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg\"> <meta name=\"twitter:creator\" content=\"@AJVicens\">  <link rel=\"dns-prefetch\" href=\"\/\/cdn.parsely.com\">\n<link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-0\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1695397585g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-4\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress-next\/dist\/css\/related-posts-block-styles.min.css?m=1696961159g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1696959155g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=7dab012cdc88b5676610\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/77532\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.3.1\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=77532\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fpredatory-sparrow-israel-gaza-cyber%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fpredatory-sparrow-israel-gaza-cyber%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-77532 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/predatory-sparrow-israel-gaza-cyber\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"26.26404494382\">\n<div class=\"single-article__header-content\" readability=\"32.04641350211\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/news\/geopolitics\/\"> <span>Geopolitics<\/span> <\/a> <\/li>\n<\/ul>\n<p> Predatory Sparrow, which has been linked to an attack on an Iranian steel facility last year, reemerged after a long hiatus Monday. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> KFAR AZA, ISRAEL – OCTOBER 10: Israeli soldiers patrol, searching for Palestinians militants near kibbutz Kfar Aza near the border with Gaza on October 10, 2023 in Kfar Gaza, Israel. (Amir Levy\/Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"69.812542743811\"><body readability=\"141.04204545455\"><\/p>\n<p>After going quiet for nearly a year, a potent hacking group with suspected links to the Israeli government reemerged online Monday, an indication that as the conflict between Israel and Hamas drags on digital actors could play a greater role. <\/p>\n<p>As the deadly violence between Israeli and Hamas fighters continues to unfold, the bulk of the fighting continues to be kinetic military operations. But since fighting began Saturday, a flurry of shadowy \u201chacktivist\u201d groups on both sides of the conflict have knocked websites offline with distributed denial-of-service attacks, defaced some websites and triggered false alarms on mobile phone apps warning of incoming attacks. <\/p>\n<p>The presence of state-backed hacking crews, hacktivist operations, pro-Iran information operations, and <a href=\"http:\/\/cyberscoop.com\/tag\/dragonbridge\/\">information operations linked to China <\/a>indicate that the conflict between Israel and Hamas is likely to attract the attention of hacking crews and intelligence agencies around the globe. <\/p>\n<p>\u201cThis crisis is too big to not draw in intelligence collectors from every corner,\u201d John Hultquist, Mandiant\u2019s chief analyst, told reporters on Tuesday. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>But it is the re-emergence of Predatory Sparrow, which is believed to be a relatively sophisticated Israeli hacking operation with a history of destructive attacks in Iran, that has particularly caught the attention of students of cyber operations. <\/p>\n<p>\u201cIt\u2019s certainly a player to watch,\u201d Hultquist said.<\/p>\n<p>On Monday, Gonjeshke Darande \u2014 \u201cPredatory Sparrow\u201d in Persian \u2014 posted the first message to its Telegram channel since January, along with a similar post on X, formerly Twitter. \u201cDo you think this is scary?\u201d the group wrote in Persian, according to a Google Translation. \u201cWe returned. We hope you\u2019re following what is happening in Gaza.\u201d<\/p>\n<p>The message included a link to the website of Iranian government\u2019s Mehr News Agency, which had been temporarily made unavailable.<\/p>\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"640\" height=\"640\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting.png?resize=640%2C640&ssl=1\" alt class=\"wp-image-77548\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png 1538w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=150,150 150w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=300,300 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=768,768 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=1024,1024 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=1536,1536 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=600,600 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=168,168 168w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=337,337 337w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=675,675 675w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-2.png?resize=843,843 843w\" sizes=\"(max-width: 1538px) 100vw, 1538px\"><figcaption class=\"wp-element-caption\">Screenshot of an image shared by the Predatory Sparrows, including a link to the Mehr News Agency in Iran, showing that the site was at least temporarily unavailable Monday (CyberScoop).<\/figcaption><\/figure>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Between 2021 and 2022, analysts linked Predatory Sparrow to a string of high-profile attacks designed to embarrass the Iranian government. An attack in October 2021 <a href=\"https:\/\/archive.ph\/30DGG\">on the payment system<\/a> linked to a national network of fuel pumps in Iran disrupted the ability of Iranians to fill up and featured messages urging frustrated motorists to contact the office of Iran\u2019s supreme leader. In June 2022, the group struck inside Iran again, <a href=\"https:\/\/cyberscoop.com\/gonjeshke-darande-israel-hackers-iran-steel-hacktivist\/\">targeting steel facilities<\/a> they said were linked to the Islamic Revolutionary Guard Corps. <\/p>\n<p>As part of the latter attack, the group released apparent closed circuit video showing heavy damage caused to one of the targeted facilities. The group appeared to have access to video monitoring inside the facility and timed the destructive attack to minimize the potential of injury to facility workers, leaving <a href=\"https:\/\/cyberscoop.com\/gonjeshke-darande-israel-hackers-iran-steel-hacktivist\/\">experts to surmise<\/a> that the attack was highly strategic and professional.<\/p>\n<p>\u201cWhat makes Predatory Sparrow so brilliant is that each activity signals greater capabilities by virtue of their restraint,\u201d Juan Andr\u00e9s Guerrero-Saade, the senior director of SentinelLabs, told CyberScoop in an online chat. \u201c\u2018We could\u2019ve, but we didn\u2019t, so don\u2019t make us, cause we can.’\u201d <\/p>\n<p>\u201c\u2018Hacktivist\u2019 fronts temporarily taking down websites for headlines look like school children in comparison,\u201d Guerrero-Saade added.<\/p>\n<p>Predatory Sparrow did not respond to a request for a comment.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Predatory Sparrow has never claimed affiliation with any government, but anonymous U.S. defense officials <a href=\"https:\/\/archive.ph\/bx6EU\">told the New York Times<\/a> that the operation targeting Iranian gas stations was carried out by Israel. There have been other hints of links to the Israeli government. After the attacks on steel facilities, for instance, the <a href=\"https:\/\/www.timesofisrael.com\/gantz-orders-probe-after-tv-reports-hint-idf-behind-iran-steel-plant-cyberattack\/\">Times of Israel reported<\/a> that Israeli military leaders had ordered an investigation into leaks and unauthorized disclosures boasting of the Israeli operation. <\/p>\n<p>There are also indications that the Iranian government believes Predatory Sparrow to be an Israeli operation. In July 2022, a group calling itself \u201cHomeland Justice\u201d <a href=\"https:\/\/cyberscoop.com\/iran-hack-albania-ransomware-mek\/\">deployed destructive malware against multiple Albanian government systems<\/a> in connection with that country hosting a conference of the Mojahedin-e Khalq, an exiled dissident Iranian opposition group. In that operation, Homeland Justice \u2014 which multiple governments and private investigators linked to the Iranian government \u2014 used a logo mocking Predatory Sparrow\u2019s Angry Bird-inspired branding featuring an irate bird inside a Star of David about to be snatched up by an eagle.<\/p>\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"640\" height=\"322\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-1.png?resize=640%2C322&ssl=1\" alt class=\"wp-image-77555\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-1.png 782w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-1.png?resize=300,151 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-1.png?resize=768,387 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-1.png?resize=600,302 600w\" sizes=\"(max-width: 782px) 100vw, 782px\"><\/figure>\n<p>Among the groups active online amid the fighting between Israel and Hamas, Predatory Sparrow has the most prolific public record, but it\u2019s far from the only one. <\/p>\n<p>The hacking groups Killnet and Anonymous Sudan have said in their Telegram channels in recent days that they would attack the government of Israel and other targets, such as Israel\u2019s Iron Dome missile defense system, although there\u2019s no indication attacks on such entities were successful. SiegedSec, a cybercrime group <a href=\"https:\/\/cyberscoop.com\/nato-siegedsec-breac\/\">known more for its politically-motivated attacks<\/a> in the U.S. and around the world, said it was carrying out attacks on Israeli infrastructure in conjunction with Anonymous Sudan.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Anonymous Sudan is a group that emerged online in January 2023 with a string of DDoS attacks against multiple organizations in Sweden, <a href=\"https:\/\/files.truesec.com\/hubfs\/Reports\/Anonymous%20Sudan%20-%20Publish%201.2%20-%20a%20Truesec%20Report.pdf\">according to the Swedish cybersecurity firm TrueSec<\/a>. The company\u2019s analysis suggests that the group likely has nothing to do with Sudan or Anonymous and that its use of paid infrastructure to carry out its attacks shows that it has \u201cbeen carefully organized by someone willing to pay for it, not a spontaneous action by activists.\u201d<\/p>\n<p>Anonymous Sudan has cooperated in the past with Killnet, an overtly pro-Russian DDoS channel that has claimed a number of DDoS attacks around the world on perceived enemies of the Russian government as well as posted documents purportedly stolen from NATO, <a href=\"https:\/\/www.mandiant.com\/resources\/blog\/killnet-new-capabilities-older-tactics\">according to Mandiant<\/a>.<\/p>\n<p>\u201cMost of the hacktivist groups that we are currently observing are primarily involved in defacements and DDoS attacks,\u201d Oleg Dyorov, head of cybercrime investigations within the Group-IB Threat Intelligence unit, said of the operations his firm has observed amid the fighting in Israel. <\/p>\n<p>\u201cOnly a handful of incidents, such as the one with the <a href=\"https:\/\/x.com\/GroupIB_TI\/status\/1711234869060358562?s=20\" target=\"_blank\" rel=\"noreferrer noopener\">exploitation<\/a> of an API vulnerability, can cause more significant harm and risks,\u201d he added, referring to reports of an attack on the RedAlert app in Israel, which provides real-time alerts of rocket attacks for Israelis. In that incident, an attacker pushed false messages to some of the app\u2019s users, including a warning that a nuclear bomb was incoming, <a href=\"https:\/\/twitter.com\/groupib_ti\/status\/1711234869060358562?s=43&t=ymItSKysQXIo_Jx8axtByA\">according to Group-IB<\/a>.<\/p>\n<p>\u201cAlthough many of these individuals possess limited technical expertise, the sheer size of their communities amplifies their impact,\u201d Dyorov said in an email. <\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"1.0333333333333\">\n<div class=\"author-card\" readability=\"8\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting-1.jpg?w=640&ssl=1\" alt=\"AJ Vicens\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by AJ Vicens<\/h4>\n<p> AJ covers nation-state threats and cybercrime. He was previously a reporter at Mother Jones. Get in touch via Signal\/WhatsApp: (810-206-9411). <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/predatory-sparrow-israel-gaza-cyber\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Savvy Israel-linked hacking group reemerges amid Gaza fighting | CyberScoop<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[636,271,302,1058,1059,513,514,456,1060,568],"tags":[637,277,306,1061,1062,517,518,457,1063,571],"class_list":["post-1852","post","type-post","status-publish","format-standard","hentry","category-anonymous-sudan","category-china","category-geopolitics","category-hamas","category-homeland-justice","category-iran","category-israel","category-killnet","category-predatory-sparrow","category-siegedsec","tag-anonymous-sudan","tag-china","tag-geopolitics","tag-hamas","tag-homeland-justice","tag-iran","tag-israel","tag-killnet","tag-predatory-sparrow","tag-siegedsec"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/anonymous-sudan\/\" rel=\"category tag\">Anonymous Sudan<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/china\/\" rel=\"category tag\">China<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/geopolitics\/\" rel=\"category tag\">Geopolitics<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/hamas\/\" rel=\"category tag\">Hamas<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/homeland-justice\/\" rel=\"category tag\">Homeland Justice<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/iran\/\" rel=\"category tag\">Iran<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/israel\/\" rel=\"category tag\">Israel<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/killnet\/\" rel=\"category tag\">KillNet<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/predatory-sparrow\/\" rel=\"category tag\">Predatory Sparrow<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/siegedsec\/\" rel=\"category tag\">SiegedSec<\/a>","tag_info":"SiegedSec","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=1852"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1852\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=1852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=1852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=1852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":1852,"date":"2023-10-10T20:36:52","date_gmt":"2023-10-10T20:36:52","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=77532"},"modified":"2023-10-10T20:36:52","modified_gmt":"2023-10-10T20:36:52","slug":"savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2023\/10\/10\/savvy-israel-linked-hacking-group-reemerges-amid-gaza-fighting\/","title":{"rendered":"Savvy Israel-linked hacking group reemerges amid Gaza fighting"},"content":{"rendered":"