Yemen — Cyber Threat Profile

Yemen's cyber environment is defined by active conflict between two rival administrations, each weaponizing internet infrastructure. The Houthi-aligned OilAlpha threat group deployed Android spyware against humanitarian organizations including CARE International and the Norwegian Refugee Council in June 2024, harvesting credentials to control aid distribution. A separate GuardZoo surveillanceware campaign targeted military personnel across the Middle East. The internationally recognized government adopted Starlink in 2024 to break Houthi monopoly over internet services, the Houthis declared this a national security threat. Both YemenNet and AdenNet are assessed as riddled with security vulnerabilities. No functional national CERT exists.

Threat actors targeting Yemen

Most targeted sectors

Recent claimed incidents

Read the full analysis on IntelFusions