A Middle Eastern threat actor known for website defacement and data breaches amid geopolitical conflict.
Analyst brief
BlackMaskers (BlackMaskers Team) is a threat actor active in the Middle East, particularly targeting Jordan amid the Israel-Iran conflict. They focus on critical Jordanian entities, including the stock exchange and private sector enterprises, as well as Saudi Arabian web platforms. Their key TTPs involve website defacement and data breaches. Defenders should prioritize securing public-facing web applications, monitoring for data exfiltration indicators, and remain vigilant during periods of heightened geopolitical tension.
BlackMaskers
BlackMaskers Team
unknown
BlackMaskers Team has emerged as a significant threat actor, particularly targeting Jordan amid the Israel-Iran conflict. They have claimed responsibility for cyberattacks on critical Jordanian entities, including the stock exchange and private sector enterprises, leveraging techniques such as website defacement and data breaches. Their operations have raised concerns about the vulnerability of national infrastructure. Additionally, they have successfully hacked Saudi Arabian web platforms, further demonstrating their capabilities.
What geographical region and types of organizations does BlackMaskers primarily target?+
They are primarily active in the Middle East, particularly targeting Jordan and Saudi Arabia. In Jordan, they target critical infrastructure such as the stock exchange and private sector enterprises, as well as web platforms in Saudi Arabia.
What are the key TTPs (Tactics, Techniques, and Procedures) of BlackMaskers?+
Their key TTPs include website defacement and data breaches.