Cyber Toufan
- Origin
- IR
- Primary motivation
- sabotage
- Sophistication
- advanced
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:11:39
Targeted industries: government-and-public-sector media-and-entertainment
Targeted regions: country_code:il
Context
Cyber Toufan is a threat actor group that has gained prominence for its cyberattacks targeting Israeli organizations. The group's tactics suggest potential nation-state backing, possibly from Iran. They have been involved in hack-and-leak operations, data breaches, and data destruction, impacting over 100 organizations. Cyber Toufan's activities align with geopolitical tensions in the Middle East and their attacks are characterized by a combination of technical breaches and psychological warfare.
Reports & references
- darkreading.com — Cyber Toufan Hacktivists Leaked 100 Plus Israeli Orgs In One Month (report)
- socradar.io — Dark Web Profile Cyber Toufan Al Aqsa (report)
- research.checkpoint.com — 11Th December Threat Intelligence Report (report)
- blog.polyswarm.io — 2023 Recap Cyber Activity In The Gaza Conflict (report)
- securityweek.com — Palestinian Hackers Hit 100 Israeli Organizations In Destructive Attacks (report)