WeRedEvils is an Israel-linked hacktivist group primarily targeting Iranian critical infrastructure.
WeRedEvils is a hacktivist group reportedly linked to Israeli interests, emerging in response to geopolitical events. They primarily target Iranian critical infrastructure, including the electric grid, oil infrastructure, and media websites like Tasnimnews. The group's known TTPs focus on disruptive operations, such as DDoS attacks and compromising website availability. Defenders should prioritize DDoS mitigation strategies for critical infrastructure, ensure web application security for public-facing sites, and monitor threat intelligence feeds for activity from this group.
WeRedEvils is a hacking group that has claimed responsibility for multiple cyber attacks. They targeted the Iranian Electric Grid and the Tasnimnews website, causing the latter to go offline. The group also claimed to have hacked into Iran's oil infrastructure, causing significant damage. They emerged in response to the Hamas massacre and are believed to be a group of Israeli cyber experts.
The group's known TTPs focus on disruptive operations, such as DDoS attacks and compromising website availability.
They primarily target Iranian critical infrastructure, including the electric grid, oil infrastructure, and media websites like Tasnimnews.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.