> CLASSIFIED_DOSSIER :: THREAT_ACTOR_PROFILE
/actor/dark-storm-team/ · 3 intel reports
Dark Storm Team is a pro-Palestinian hacktivist collective that emerged in 2023 and rapidly established itself as one of the more active and technically capable groups within the pro-Palestinian cyber warfare ecosystem that mobilised following the escalation of conflict in Gaza. The group conducts Distributed Denial of Service (DDoS) attacks and data theft operations against Israeli, Western, and Arab entities perceived as hostile to Palestinian interests.
Dark Storm Team gained significant international attention in March 2024 when they claimed responsibility for a DDoS attack against X (formerly Twitter), causing widespread service outages affecting users globally. The attack demonstrated the group's capability to impact major global internet infrastructure and generated considerable media coverage amplifying their stated political objectives.
Beyond high-profile platform attacks, Dark Storm Team conducts sustained campaigns against Israeli media organisations, government portals, financial institutions, and critical infrastructure. The group has also targeted Arab governments they perceive as insufficiently supportive of Palestinian resistance, reflecting an ideological rigidity that extends their target list beyond purely Western or Israeli entities.
Dark Storm Team operates an active Telegram channel with a substantial following, using the platform to claim attacks, publish stolen data, and coordinate with allied hacktivist groups. Their ability to execute impactful DDoS attacks against major internet platforms distinguishes them from most hacktivist collectives and suggests access to significant botnet or DDoS-for-hire infrastructure.
Dark Storm Team is a hacktivist DDoS brand that has claimed government and infrastructure websites in multiple regions, including earlier CyberAsia notes on Romanian public-sector portals. Their product is visibility: Telegram banners plus check-host maps. That is not the same as a SCADA breach. Confirm with your own sensors before briefing executives that "Dark Storm is inside the network."
Mitigation is edge capacity and origin hiding, not a full IR retainer on day one of a red map.
The hacktivist collective known as Dark Storm Team has publicly announced its participation in a coordinated cyber campaign…
A coordinated wave of distributed denial-of-service (DDoS) attacks against digital systems linked to Romania’s Constanta seaport has been…
The Dark Storm Team hacktivist group has launched a massive Dark Storm Team Romania Cyberattack, targeting critical government…