Cyber Toufan — Hacktivist Profile
Cyber Toufan is an Iranian-aligned hacktivist group that surged to prominence following the October 7, 2023 Hamas attacks, conducting large-scale data exfiltration and leak operations against Israeli and US-linked organizations. The group claimed responsibility for breaching over 40 Israeli companies, leaking sensitive customer data and internal documents via Telegram channels. Cyber Toufan employs DDoS attacks, website defacement, and data-wiper deployments, coordinating with other Iran-aligned hacktivist collectives. Their operations are characterized by high-volume data dumps designed to maximize reputational damage against targets perceived as supporting Israeli operations.Also tracked as
Cyber Toufan Al-Aqsa, Cyber Toufan al-Aksa
Tools & malware
- Custom shell script (shred persistence) Tool
- Shred Wiper
- Tor hidden service Tool
Vendor research
- Dark Web Profile: Cyber Toufan Al-aqsa SOCRadar
- Cyber Toufan Al-Aqsa Signature-IT Attack Cyberint
- Threat Group 'Cyber Toufan' Emerges with Capabilities Beyond Typical Hacktivist Collectives Anvilogic
- Cyber Toufan al-Aksa Hacker Group Join the Cease Fire International Institute for Counter-Terrorism (ICT)
- 'Cyber Toufan' Hacktivists Leaked 100-Plus Israeli Orgs in One Month Dark Reading
- Pro-Palestinian operation claims dozens of data breaches against Israeli firms Recorded Future News (The Record)