Evilbyte is a hacktivist group known for politically motivated data leaks in the Middle East and Argentina.
The Evilbyte group is a hacktivist actor carrying out politically and ideologically motivated attacks primarily in regions such as the Middle East and Argentina. This actor has breached diverse targets like the MyFatoorah banking system, Radio 10 Rosario, and Israeli government websites to leak data. Initial TTPs involve web compromises and data leaking. Defenders should focus on monitoring public-facing systems, especially in government, media, and financial sectors, and check for application-level vulnerabilities.
EvilByte is a hacktivist group that has conducted several high-profile cyber attacks in 2024, including breaching MyFatoorah's banking system in retaliation against Saudi media 1 and targeting Radio 10 Rosario in Argentina 2. The group has also claimed responsibility for breaching Israeli government websites and leaking data of government employees and intelligence agencies 4.
Government, media, and financial sector systems are among the primary targets of the Evilbyte group.
Web compromises and data leaking are the initial TTP indicators.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.