8 months ago
Iranian Hackers Exploit Israeli Vulnerabilities
Iranian hackers have been successfully attacking Israeli institutions by using known weaknesses in their computer systems.
These attacks have led to the leaking of sensitive information, such as personal data of Israeli officials and documents from government bodies.
Israel is known for its strong cybersecurity, especially for critical infrastructure like electric utilities, but other institutions like hospitals are not as well-protected.
Experts suggest that Israel could better protect itself by passing a comprehensive cyber law that would require all important bodies to adopt cyber protections.
The attacks have been embarrassing for Israel, a country known for its advanced cyber warfare capabilities.
Iranian hackers have been improving their skills and using various methods to find and exploit vulnerabilities in Israeli systems.
Iranian hackers have successfully breached Israeli institutions using known vulnerabilities.
Leaked data includes passport information of Israeli generals and sensitive government documents.
Israel's cybersecurity laws focus on critical infrastructure, leaving other institutions vulnerable.
Experts recommend a comprehensive cyber law to better protect all important bodies.
Iranian hackers have been improving their capabilities and using various methods to exploit vulnerabilities.
- Who
- Iranian-linked hacking groups
- What
- Cyberattacks and data leaks targeting Israeli institutions
- Where
- Israel, targeting various institutions and government bodies
- When
- Over the past two years, with recent attacks in June and last week
- Why
- To cause reputational damage and exploit known vulnerabilities
Key facts
- Attackers
- Iranian-linked hacking groups
- Targets
- Israeli institutions, hospitals, government bodies
- Methods
- Known vulnerabilities, phishing, SIM swaps
- Notable Leaks
- Passport info of Israeli generals, Ministry of Justice documents, gun-license applications
- Cyber Law
- Israel lacks comprehensive cyber law for non-critical infrastructure
- Cybersecurity Companies
- Checkpoint, Wiz, NSO's Pegasus
- Iran's Capabilities
- Improving technological capabilities and personnel training
- Israel's Response
- No public comment on attacks, focuses on critical infrastructure protection
Quotes
Ari Ben Am
Adjunct fellow at the Center on Cyber and Technology Innovation at the Foundation for Defense of Democracies, a Washington think tank.
“For the most part, they are exploiting known vulnerabilities.”
livemint.com
“The Iranians don’t have the ability to uncover totally new vulnerabilities, or zero day vulnerabilities at scale.”
livemint.com
Tehilla Shwartz Altshuler
Senior fellow specializing in technology law and policy at the Israel Democracy Institute, a Jerusalem-based think tank.
“There is a gap between the technological abilities of Israel as a cyber nation and the regulatory framework that is supposed to protect Israel’s civil arena from cyberattacks.”
livemint.com
Adam Meyers
Head of counter adversary operations at CrowdStrike, a cybersecurity company.
“Given the sheer volume it’s hard to be right 100% of the time.”
livemint.com
