Cyber Toufan is a likely Iran-backed threat actor known for targeting Israeli organizations with hack-and-leak operations and data destruction.
Analyst brief
Cyber Toufan is a threat actor likely backed by Iran, targeting Israeli organizations in alignment with Middle Eastern geopolitical tensions. They have impacted over 100 entities through hack-and-leak operations, data breaches, and data destruction, combining technical breaches with psychological warfare. Their TTPs focus on exfiltrating and destroying data to maximize reputational damage. Defenders should monitor for indicators of data exfiltration, anomalous network traffic, and mass file operations, especially within Israeli-linked entities.
Cyber Toufan
unknown
Cyber Toufan is a threat actor group that has gained prominence for its cyberattacks targeting Israeli organizations. The group's tactics suggest potential nation-state backing, possibly from Iran. They have been involved in hack-and-leak operations, data breaches, and data destruction, impacting over 100 organizations. Cyber Toufan's activities align with geopolitical tensions in the Middle East and their attacks are characterized by a combination of technical breaches and psychological warfare.