The Gaza-based Gaza Hacker Team (GHT) hacker group targets primarily Israeli websites. It has participated in the annual #OpIsrael cyberattacks on Israel, which are timed to roughly coincide with Israel's Independence Day.
As of February 2015, the latest campaigns to which the group has been linked are Operation Arid Viper and Advtravel.[1]
GHT offshoots such as Molerats have also been conducting malware campaigns; one of these prompted the Israel Police to take all their computers offline for a week in October 2012 after they found a suspicious file circulating on their computers.[2]
A list of GHT hacks of 2,103 Israeli websites going back to August 2011 includes educational, business, and personal sites.[3]
GHT is also active on social media, with accounts on YouTube, Facebook, LinkedIn, Twitter, Flicker, and more.
Between April and June, 2015, GHT hacked a large number of websites, a substantial portion of which are Israeli. A list of all the websites can be found at the end of this report.
GHT Website And Forum
GHT's website, Gaza-hacker.net/, which states that it was created in June 2009, operates as a forum for those who share its views. Registration is free and anyone may join. While the group denies responsibility for posts on the website's forum, under the website's Terms of Service its administrators strive to remove content that contradicts their views. However, they have neither removed the significant promotion of Islamism and jihad posted on it, nor taken down the forums supporting martyrdom and jihad, where some users indicate that they are supporters of the Islamic State (ISIS).
Website home page, accessed February 20, 2015
Website home page, accessed March 18, 2015.
Forum (Gaza-hacker.net/cc/) accessed March 18, 2015
The website states that it is "The First Islamic Network for Cyber Jihad and Cyber Resistance against the Zionist Occupation." Its menu bar options include: "Registration," "Instructions," "Calendar," "Posts Today," and "Search."
The "Forum Sections" include various Islamic topics, hacking topics, "News on Jewish Affairs," and notices of martyrs.
The login page asks forum users to register:
The website sets out terms and conditions for the forum: "Registration on the forum is free! We require your commitment to the terms, conditions and policies outlined below, if you agree to the conditions, then click 'agree' and click 'register' below. If you want to cancel registration, click here to return to the forums' home page.
"The supervisors and admins of Gaza Hacker Team, despite their efforts to stop all violating posts, are unable to review all posts, and all topics reflect the views of its authors; the Gaza Hacker Team takes no responsibility for any of the posts..."
The website's "Contact Us" page allows users to send it messages:
GHT On Facebook
The GHT Facebook page, G.H.T.HACKER, was created June 17, 2012 and as of this writing has 2,059 likes. Its "About" section lists a website (Gaza-hacker.net) and a contact email (m_97 @hacker.ps). There has been no new activity on the page since December 2014.
The organization's location is identified on its Facebook "About" page as the Gaza Strip.
The page's admin was identified as Mhmad H Sager; as of March 2015, that information no longer appears on the page.
Mhmad H Sager, admin.
The group's Facebook posts include links to sites they have hacked, as well as links to their YouTube channel.
In a June 26, 2015 photo, GHT showed hackers in Guy Fawkes masks with the CIA website on a laptop screen:
GHT On YouTube
The GHT YouTube channel, HackerGazaTeam, features tutorial videos on hacking. The most recent activity on it was in 2013. As of March 18, 2015, the page had 7,075 views.
GHT On Twitter, LinkedIn, Flickr
The GHT also has Twitter, LinkedIn, and Flickr accounts, but they have all been inactive since 2011.
The group's Twitter account, @gazahackerteam, bills the organization as "Gaza Hacker Team | The Best Palestenian [sic] Hacking & security community." It was created in March 2011. As of this writing, it had 134 followers, but has so far posted no tweets.
The group has a LinkedIn account, but it has been inactive since May 2011.
Flickr
The group's Flickr account, Flickr.com/photos/gaza-hacker, launched in April 2011, includes a number of images, but has not been active since.
April-June 2015 Hacks
Following is a list of websites hacked by GHT between April and September 2015:
| www. edelstein.org.il | 9/1/2015 |
| www.lawguide.nrg.co.il | 6/8/2015 |
| www.lawguide.co.il | 6/8/2015 |
| infinity.co.il | 5/27/2015 |
| www.kriaflimor.co.il | 5/17/2015 |
| rhlpjewelry.com/sa.php | 5/17/2015 |
| xn--5dbdesb2bce8c.co.il | 4/14/2015 |
| flynorth.co.il | 4/14/2015 |
| thai-time.co.il | 4/14/2015 |
| www.nimrodplus.co.il | 4/14/2015 |
| niflaot.com | 4/14/2015 |
| sigalya.co.il | 4/14/2015 |
| e-coaching.co.il | 4/14/2015 |
| shm.co.il | 4/14/2015 |
| yonatanir.com | 4/14/2015 |
| moto-lock.net | 4/14/2015 |
| motolock.net | 4/14/2015 |
| rozentech.co.il | 4/14/2015 |
| www.romkal.com | 4/14/2015 |
| art-allochtoon.com | 4/14/2015 |
| tarshis.co.il | 4/14/2015 |
| kt38.co.il | 4/14/2015 |
| pittel.co.il | 4/14/2015 |
| noonmoon.co.il | 4/14/2015 |
| schoolcafe.co.il | 4/14/2015 |
| tamirbasin.com | 4/14/2015 |
| talyaga.com | 4/14/2015 |
| tachlit.net | 4/14/2015 |
| sealy.co.il | 4/14/2015 |
| syst.co.il | 4/14/2015 |
| tinc.co.il | 4/14/2015 |
| n-idan.co.il | 4/14/2015 |
| aquapoolco.co.il | 4/14/2015 |
| kravmagagreatneck.com | 4/14/2015 |
| kravmaganewyork.org | 4/14/2015 |
| self-defense.co.il | 4/14/2015 |
| tkmnewyork.com | 4/14/2015 |
| traditionalkravmaga.com | 4/14/2015 |
| nira-art.com | 4/14/2015 |
| imsco.co.il | 4/14/2015 |
| stec.co.il | 4/14/2015 |
| rigotec.co.il | 4/14/2015 |
| vasm.co.il | 4/14/2015 |
| rubinl.co.il | 4/14/2015 |
| romprat.co.il | 4/14/2015 |
| tgilgul.co.il | 4/14/2015 |
| sportspine.co.il | 4/14/2015 |
| vivet.co.il | 4/14/2015 |
| ramyklein.co.il | 4/14/2015 |
| tirosh-pt.co.il | 4/14/2015 |
| jonathanofek.co.il | 4/14/2015 |
| realiteq.com | 4/14/2015 |
| niflaotguide.co.il | 4/14/2015 |
| semel.org.il | 4/14/2015 |
| pureline.co.il | 4/14/2015 |
| powermanager.co.il | 4/14/2015 |
| psy-couple-family-center.co.il | 4/14/2015 |
| yarelcpa.co.il | 4/14/2015 |
| nidco.co.il | 4/14/2015 |
| yarel.co.il | 4/14/2015 |
| bkr-yarel.co.il | 4/14/2015 |
| rsf-israel.com | 4/14/2015 |
| shavit.betagroup.co.il | 4/14/2015 |
| shavit-judaica.com | 4/14/2015 |
| ygur.co.il | 4/14/2015 |
| sexologit.com | 4/14/2015 |
| martza.co.il | 4/14/2015 |
| malkaspector.com | 4/14/2015 |
| varoddesign.com | 4/14/2015 |
| shimshonltd.co.il | 4/14/2015 |
| rafieldor.co.il | 4/14/2015 |
| rafaeleldor.com | 4/14/2015 |
| rafaeleldor.co.il | 4/14/2015 |
| talstoff.co.il | 4/14/2015 |
| xn----7hcdbalj0ab8a2fub.com | 4/14/2015 |
| xn-----7ldccbapnrqbr5a0a4gg2bm... | 4/14/2015 |
| xn-----6ldbcd0anld1bdsn0f7a.com | 4/14/2015 |
| tmura.org.il | 4/14/2015 |
| zoharnavon.com | 4/14/2015 |
| sosnamoving.com | 4/14/2015 |
| stavitbartov.com | 4/14/2015 |
| segol1.co.il | 4/14/2015 |
| shapiratax.co.il | 4/14/2015 |
| site.ranad.co.il | 4/14/2015 |
| www.ranadtec.co.il | 4/14/2015 |
| ranad.co.il | 4/14/2015 |
| garage.co.il | 4/13/2015 |
| gasgas.co.il | 4/13/2015 |
| gazit-poly.co.il | 4/13/2015 |
| gazit-polygraph.com | 4/13/2015 |
| polygraph-school.com | 4/13/2015 |
| gdiet.co.il | 4/13/2015 |
| gilinv.betagroup.co.il | 4/13/2015 |
| gilinv.co.il | 4/13/2015 |
| global-call.co.il | 4/13/2015 |
| gni.co.il | 4/13/2015 |
| gol-trade.com | 4/13/2015 |
| sunparks.co.il | 4/13/2015 |
| guterman-law.co.il | 4/13/2015 |
| hadassa.co.il | 4/13/2015 |
| herman-legal.co.il | 4/13/2015 |
| n.hila-hc.co.il | 4/13/2015 |
| homeotreat.co.il | 4/13/2015 |
| horowitz-group.com | 4/13/2015 |
| www.horowitz-group.co.il | 4/13/2015 |
| www.horowits-group.co.il | 4/13/2015 |
| www.horowits-group.com | 4/13/2015 |
| ilanablecher.co.il | 4/13/2015 |
| www.isracom.org.il | 4/13/2015 |
| www.isracom.org | 4/13/2015 |
| jem-electric.co.il | 4/13/2015 |
| kelnercustoms.co.il | 4/13/2015 |
| www.kci.co.il | 4/13/2015 |
| kenafibers.com | 4/13/2015 |
| www.kenaf-seeds.com | 4/13/2015 |
| keren-or.net | 4/13/2015 |
| keshet-t.betagroup.co.il | 4/13/2015 |
| keshet-t.co.il | 4/13/2015 |
| www.kleinsharon.co.il | 4/13/2015 |
| kolhayom.com | 4/13/2015 |
| www.kte-ltd.co.il | 4/13/2015 |
| kte-ltd.com | 4/13/2015 |
| www.xn----9hckbb5br0ahg.co.il | 4/13/2015 |
| www.xn--9dbhabvp4bgg.co.il | 4/13/2015 |
| lablabi.co.il | 4/13/2015 |
| letsgo-china.com | 4/13/2015 |
| lh-lawfirm.co.il | 4/13/2015 |
| leylot-rabat.co.il | 4/13/2015 |
| new.liotech.co.il | 4/13/2015 |
| liotech.co.il | 4/13/2015 |
| gsl.co.il | 4/13/2015 |
| liritengineering.co.il | 4/13/2015 |
| loverevolution.co.il | 4/13/2015 |
| www.lya.co.il | 4/13/2015 |
| metallic.co.il | 4/13/2015 |
| maayanlazar.co.il | 4/13/2015 |
| macaw.co.il | 4/13/2015 |
| maleor.com | 4/13/2015 |
| markovitz.co.il | 4/13/2015 |
| martef.org.il | 4/13/2015 |
| masa-kolnoey.co.il | 4/13/2015 |
| miraar.co.il | 4/13/2015 |
| mashaf.com | 4/13/2015 |
| maygalim.com | 4/13/2015 |
| mdu.co.il | 4/13/2015 |
| mechan-europe.com | 4/13/2015 |
| medi-market.co.il | 4/13/2015 |
| medistaff.co.il | 4/13/2015 |
| arcturians.co.il | 4/13/2015 |
| meirharan.co.il | 4/13/2015 |
| mhlal.com | 4/13/2015 |
| michael-klachkin.com | 4/13/2015 |
| mikel-eng.co.il | 4/13/2015 |
| mirieisin.com | 4/13/2015 |
| mirofoods.com | 4/13/2015 |
| modiplast.com | 4/13/2015 |
| mokedkehila.co.il | 4/13/2015 |
| amiash.com | 4/13/2015 |
| esliltd.com | 4/13/2015 |
| k-eden.biz | 4/13/2015 |
| kalanit10.co.il | 4/13/2015 |
| mbiton.com | 4/13/2015 |
| mbw.co.il | 4/13/2015 |
| mbitona.com | 4/13/2015 |
| moranb.com | 4/13/2015 |
| nenny.co.il | 4/13/2015 |
| shay-n.com | 4/13/2015 |
| tomerl.net | 4/13/2015 |
| udiporat.com | 4/13/2015 |
| yairal.com | 4/13/2015 |
| zrh11.com | 4/13/2015 |
| mshrclean.co.il | 4/13/2015 |
| msitech.co.il | 4/13/2015 |
| zemer.org.il | 4/13/2015 |
| www.2-t.co.il | 4/13/2015 |
| myspy.co.il | 4/13/2015 |
| myreco.co.il | 4/13/2015 |
| naturaisrael.com | 4/13/2015 |
| navadv.co.il | 4/13/2015 |
| navitpeleg.com | 4/13/2015 |
| ncexpert.co.il | 4/13/2015 |
| nuvitalityproducts.co.il | 4/13/2015 |
| odrahit.co.il | 4/13/2015 |
| ofek-kat.co.il | 4/13/2015 |
| ofenbari.co.il | 4/13/2015 |
| olla.co.il | 4/13/2015 |
| omendiecasting.co.il | 4/13/2015 |
| or4home.co.il | 4/13/2015 |
| orlygutman.co.il | 4/13/2015 |
| orvehaim.co.il | 4/13/2015 |
| otkids.co.il | 4/13/2015 |
| www.galicymerman.com | 4/13/2015 |
| s2000.co.il | 4/13/2015 |
| shivuk-hagay.co.il | 4/13/2015 |
| ortho1.co.il | 4/13/2015 |
| xn--8dbbboikisnch5dd4a.com | 4/13/2015 |
| naadned.co.il | 4/13/2015 |
| bh-sign.com | 4/13/2015 |
| orgon.biz | 4/13/2015 |
| sadna4u.com | 4/13/2015 |
| sarahgillon.com | 4/13/2015 |
| hananlevi.co.il | 4/13/2015 |
| nautilus.org.il | 4/13/2015 |
| www.noya.co.il | 4/13/2015 |
| xn--8dbbm0a.com | 4/13/2015 |
| www.summerpro.co.il | 4/13/2015 |
| aba-group.co.il | 4/13/2015 |
| g-reenberg.co.il | 4/13/2015 |
| abrahamov.co.il | 4/13/2015 |
| aloumim.org.il | 4/13/2015 |
| al-group.co.il | 4/13/2015 |
| al1-group.co.il | 4/13/2015 |
| alpha-marketing.co.il | 4/13/2015 |
| www.alter-design.co.il | 4/13/2015 |
| amidan.net | 4/13/2015 |
| anakhamamtakim.co.il | 4/13/2015 |
| anatteva.co.il | 4/13/2015 |
| dialoguf.co.il | 4/13/2015 |
| avivalentin.com | 4/13/2015 |
| avot-meyasdim.co.il | 4/13/2015 |
| www.balonim.co.il | 4/13/2015 |
| www.balonim.com | 4/13/2015 |
| bar-tec.com | 4/13/2015 |
| www.bar-tec.co.il | 4/13/2015 |
| bbreath.net | 4/13/2015 |
| bbreath.com | 4/13/2015 |
| bs-bestsourcing.com | 4/13/2015 |
| xn--8dbabcaanmqlda9bc4ipbp.com | 4/13/2015 |
| xn--8dbckhihpo8cva.co.il | 4/13/2015 |
| sys.beta-hosting.com | 4/13/2015 |
| bloodpressure.org.il | 4/13/2015 |
| boneh-refael.com | 4/13/2015 |
| coach-4u.co.il | 4/13/2015 |
| cohenmack.co.il | 4/13/2015 |
| colombus-sport.co.il | 4/13/2015 |
| www.10commandments-method.com | 4/13/2015 |
| 10commandments-method.org | 4/13/2015 |
| comm.10commandments-method.com | 4/13/2015 |
| correct.org.il | 4/13/2015 |
| curator.co.il | 4/13/2015 |
| daat-imun.co.il | 4/13/2015 |
| danieldotan.com | 4/13/2015 |
| darenlabs.co.il | 4/13/2015 |
| dharma-n.com | 4/13/2015 |
| donner-tech.com | 4/13/2015 |
| pepper.life | 4/13/2015 |
| lovememore.co.il | 4/13/2015 |
| juicytalk.co.il | 4/13/2015 |
| juicy-talk.com | 4/13/2015 |
| juicy-talk.co.il | 4/13/2015 |
| doritbendor.com | 4/13/2015 |
| drorlab.co.il | 4/13/2015 |
| ecoprocess.co.il | 4/13/2015 |
| elirantama38.co.il | 4/13/2015 |
| el-tal.co.il | 4/13/2015 |
| endodont.org.il | 4/13/2015 |
| es-cpa.co.il | 4/13/2015 |
| even-meazvim.co.il | 4/13/2015 |
| exotigan.co.il | 4/13/2015 |
| nefeshhayeled.com | 4/13/2015 |
| fridenson.co.il | 4/13/2015 |
| www.mmtrade.co.il | 4/13/2015 |
| frigor.co.il | 4/13/2015 |
| tdt09.com | 4/13/2015 |
| hhkgallery.co.il | 4/13/2015 |
| www.hhkgallery.com | 4/13/2015 |
| adident.co.il | 4/13/2015 |
| www.barshan.com | 4/13/2015 |
| barshan.betagroup.co.il | 4/13/2015 |
| arcticcat.co.il | 4/13/2015 |
| www.haravpinto.com | 4/6/2015 |
| www.shuvaisrael.com | 4/6/2015 |
| www.pixmed.net | 4/2/2015 |
| chiropractor.co.il | 4/2/2015 |
| en.ksh.org.il | 4/2/2015 |
| pizza2.co.il | 4/2/2015 |
| www.ate.co.il | 4/2/2015 |
| www.hwarc.com | 4/2/2015 |
| www.lifshits.co.il | 4/2/2015 |
| www.lop.co.il | 4/2/2015 |
| www.telekeys.com | 4/2/2015 |
| www.truelove.co.il | 4/2/2015 |
| einatgeva.com | 4/2/2015 |
| forever.co.il | 4/2/2015 |
| rockets.co.il | 4/2/2015 |
| series.co.il | 4/2/2015 |
| www.allright.co.il | 4/2/2015 |
| www.damage.co.il | 4/2/2015 |
| www.tutim.co.il | 4/2/2015 |
Endnotes:
[1] Techworld.com, February 17, 2015.
[2] Times of Israel, June 8, 2014. According to the U.S. security group FireEye, Molerats has been engaged in cyber-attacks and phishing scams against Israelis using a tool called Poison Ivy since 2011.
[3] Zone-h.org/archive/notifier=Gaza%20Hacker%20Team?zh=1, accessed March 19, 2015. Zone-H is an archive of defaced websites.
Latest Posts
