 |
สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์ Electronic Transactions Development Agency |
|
สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์ Electronic Transactions Development Agency |
APT group: Cyber Caliphate Army (CCA), United Cyber Caliphate (UCC)| Names | Cyber Caliphate Army (CCA) (self given) United Cyber Caliphate (UCC) (self given) Islamic State Hacking Division (self given) ATK 133 (Thales) TAG-CT6 (Recorded Future) | |
| Country | [ISIS] | |
| Motivation | Sabotage and destruction | |
| First seen | 2014 | |
| Description | (Wikipedia) Islamic State Hacking Division or United Cyber Caliphate refers to any number of group self-identifying as the digital army for Islamic State of Iraq and Levant. The cyber security group had pledged allegiance to Jeremy An and his objectives in late 2014. Their recent claims and hacks have led FBI director James Comey to state that his agency does not yet have the capabilities to limit ISIL attempts to recruit Americans through social media. Russian military hackers have been identified as using the CyberCaliphate nomer to cover several hacking attacks, notably on TV5Monde and the Twitter of US CENTCOM. A list of names and details said to be of American military personnel was released by unknown parties who said they were part of the ISHD, but doubts were raised on the source and nature of the data. | |
| Observed | Sectors: Defense, Government. Countries: Australia, Canada, UK, USA. | |
| Tools used | ||
| Operations performed | Feb 2015 | U.S. military wives’ death threats Five military wives received death threats from a hacker group calling itself “CyberCaliphate”, claiming to be an Islamic State affiliate, on February 10, 2015. This was later discovered to have been a false flag attack by Sofacy, APT 28, Fancy Bear, Sednit, when the victims’ email addresses were found to have been in the Fancy Bear phishing target list. <https://www.apnews.com/4d174e45ef5843a0ba82e804f080988f> |
| Apr 2015 | Tasmania's Hobart International Airport website has been shut down after it was hacked and defaced with a statement supporting the radical Islamist group <https://www.telegraph.co.uk/news/worldnews/islamic-state/11531794/Australian-airport-website-hacked-by-Islamic-State.html> | |
| Apr 2015 | Compromise of TV5Monde in France “A group calling itself the Cyber Caliphate, linked to so-called Islamic State, first claimed responsibility. But an investigation now suggests the attack was in fact carried out by a group of Russian hackers. (Sofacy, APT 28, Fancy Bear, Sednit, ed.)” <https://www.bbc.com/news/technology-37590375> | |
| Jun 2015 | ISIS 'kill list' includes names of 151 Canadians <https://www.cbc.ca/news/canada/isis-kill-list-canadians-1.3637214> | |
| Aug 2015 | Isis 'hacking division' releases details of 1,400 Americans and urges attacks <https://www.theguardian.com/world/2015/aug/13/isis-hacking-division-releases-details-of-1400-americans-and-urges-attacks> | |
| Sep 2015 | ISIS hackers intercept top secret British Government emails in major security breach uncovered by GCHQ <https://www.mirror.co.uk/news/uk-news/isis-hackers-intercept-top-secret-6428423> | |
| Apr 2017 | ISIS-linked Cyber Group Releases 'Kill List' of 8,786 US Targets For Lone Wolf Attacks <https://www.newsweek.com/isis-linked-cyber-group-releases-kill-list-8786-us-targets-lone-wolf-attacks-578765> | |
| Information | <https://en.wikipedia.org/wiki/Islamic_State_Hacking_Division> | |
Last change to this card: 09 December 2021
|
Digital Service Security Center Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1227 | |
 |
[email protected] | |