Gaza Hacker Team: Active On Facebook, YouTube, Twitter, LinkedIn, Flickr, And Its Own Website/Forum, Shows Support For Jihad, Martyrdom, ISIS; Its Offshoots Conduct Malware Campaigns

September 23, 2015

cjl923

The Gaza-based Gaza Hacker Team (GHT) hacker group targets primarily Israeli websites. It has participated in the annual #OpIsrael cyberattacks on Israel, which are timed to roughly coincide with Israel’s Independence Day.

As of February 2015, the latest campaigns to which the group has been linked are Operation Arid Viper and Advtravel.[1]

GHT offshoots such as Molerats have also been conducting malware campaigns; one of these prompted the Israel Police to take all their computers offline for a week in October 2012 after they found a suspicious file circulating on their computers.[2]

A list of GHT hacks of 2,103 Israeli websites going back to August 2011 includes educational, business, and personal sites.[3]

GHT is also active on social media, with accounts on YouTube, Facebook, LinkedIn, Twitter, Flicker, and more.

Between April and June, 2015, GHT hacked a large number of websites, a substantial portion of which are Israeli. A list of all the websites can be found at the end of this report. 

GHT Website And Forum

GHT’s website, Gaza-hacker.net/, which states that it was created in June 2009, operates as a forum for those who share its views. Registration is free and anyone may join. While the group denies responsibility for posts on the website’s forum, under the website’s Terms of Service its administrators strive to remove content that contradicts their views. However, they have neither removed the significant promotion of Islamism and jihad posted on it, nor taken down the forums supporting martyrdom and jihad, where some users indicate that they are supporters of the Islamic State (ISIS).

cjl9231
Website home page, accessed February 20, 2015

 cjl9232
Website home page, accessed March 18, 2015.

cjl9233
Forum (Gaza-hacker.net/cc/) accessed March 18, 2015 

The website states that it is “The First Islamic Network for Cyber Jihad and Cyber Resistance against the Zionist Occupation.” Its menu bar options include: “Registration,” “Instructions,” “Calendar,” “Posts Today,” and “Search.” 

cjl9234

The “Forum Sections” include various Islamic topics, hacking topics, “News on Jewish Affairs,” and notices of martyrs.

 cjl9235

The login page asks forum users to register:

 cjl9236

The website sets out terms and conditions for the forum: “Registration on the forum is free! We require your commitment to the terms, conditions and policies outlined below, if you agree to the conditions, then click ‘agree’ and click ‘register’ below. If you want to cancel registration, click here to return to the forums’ home page.

“The supervisors and admins of Gaza Hacker Team, despite their efforts to stop all violating posts, are unable to review all posts, and all topics reflect the views of its authors; the Gaza Hacker Team takes no responsibility for any of the posts…”

cjl9237 

cjl9238

The website’s “Contact Us” page allows users to send it messages:

cjl9239

GHT On Facebook

The GHT Facebook page, G.H.T.HACKER, was created June 17, 2012 and as of this writing has 2,059 likes. Its “About” section lists a website (Gaza-hacker.net) and a contact email (m_97 @hacker.ps). There has been no new activity on the page since December 2014.

cjl92310

The organization’s location is identified on its Facebook “About” page as the Gaza Strip.

 cjl92311

The page’s admin was identified as Mhmad H Sager; as of March 2015, that information no longer appears on the page.

cjl92312
Mhmad H Sager, admin. 

The group’s Facebook posts include links to sites they have hacked, as well as links to their YouTube channel.

cjl92313

In a June 26, 2015 photo, GHT showed hackers in Guy Fawkes masks with the CIA website on a laptop screen:

06262015_Gaza_Hacker_Team

GHT On YouTube

The GHT YouTube channel, HackerGazaTeam, features tutorial videos on hacking. The most recent activity on it was in 2013. As of March 18, 2015, the page had 7,075 views.

cjl92315

GHT On Twitter, LinkedIn, Flickr

The GHT also has Twitter, LinkedIn, and Flickr accounts, but they have all been inactive since 2011.

Twitter

The group’s Twitter account, @gazahackerteam, bills the organization as “Gaza Hacker Team | The Best Palestenian [sic] Hacking & security community.” It was created in March 2011. As of this writing, it had 134 followers, but has so far posted no tweets.

cjl92316

LinkedIn

The group has a LinkedIn account, but it has been inactive since May 2011.

cjl92317

Flickr

The group’s Flickr account, Flickr.com/photos/gaza-hacker, launched in April 2011, includes a number of images, but has not been active since.

cjl92318

April-June 2015 Hacks

Following is a list of websites hacked by GHT between April and September 2015:

www. edelstein.org.il 9/1/2015
www.lawguide.nrg.co.il 6/8/2015
www.lawguide.co.il 6/8/2015
infinity.co.il 5/27/2015
www.kriaflimor.co.il 5/17/2015
rhlpjewelry.com/sa.php 5/17/2015
xn--5dbdesb2bce8c.co.il 4/14/2015
flynorth.co.il 4/14/2015
thai-time.co.il 4/14/2015
www.nimrodplus.co.il 4/14/2015
niflaot.com 4/14/2015
sigalya.co.il 4/14/2015
e-coaching.co.il 4/14/2015
shm.co.il 4/14/2015
yonatanir.com 4/14/2015
moto-lock.net 4/14/2015
motolock.net 4/14/2015
rozentech.co.il 4/14/2015
www.romkal.com 4/14/2015
art-allochtoon.com 4/14/2015
tarshis.co.il 4/14/2015
kt38.co.il 4/14/2015
pittel.co.il 4/14/2015
noonmoon.co.il 4/14/2015
schoolcafe.co.il 4/14/2015
tamirbasin.com 4/14/2015
talyaga.com 4/14/2015
tachlit.net 4/14/2015
sealy.co.il 4/14/2015
syst.co.il 4/14/2015
tinc.co.il 4/14/2015
n-idan.co.il 4/14/2015
aquapoolco.co.il 4/14/2015
kravmagagreatneck.com 4/14/2015
kravmaganewyork.org 4/14/2015
self-defense.co.il 4/14/2015
tkmnewyork.com 4/14/2015
traditionalkravmaga.com 4/14/2015
nira-art.com 4/14/2015
imsco.co.il 4/14/2015
stec.co.il 4/14/2015
rigotec.co.il 4/14/2015
vasm.co.il 4/14/2015
rubinl.co.il 4/14/2015
romprat.co.il 4/14/2015
tgilgul.co.il 4/14/2015
sportspine.co.il 4/14/2015
vivet.co.il 4/14/2015
ramyklein.co.il 4/14/2015
tirosh-pt.co.il 4/14/2015
jonathanofek.co.il 4/14/2015
realiteq.com 4/14/2015
niflaotguide.co.il 4/14/2015
semel.org.il 4/14/2015
pureline.co.il 4/14/2015
powermanager.co.il 4/14/2015
psy-couple-family-center.co.il 4/14/2015
yarelcpa.co.il 4/14/2015
nidco.co.il 4/14/2015
yarel.co.il 4/14/2015
bkr-yarel.co.il 4/14/2015
rsf-israel.com 4/14/2015
shavit.betagroup.co.il 4/14/2015
shavit-judaica.com 4/14/2015
ygur.co.il 4/14/2015
sexologit.com 4/14/2015
martza.co.il 4/14/2015
malkaspector.com 4/14/2015
varoddesign.com 4/14/2015
shimshonltd.co.il 4/14/2015
rafieldor.co.il 4/14/2015
rafaeleldor.com 4/14/2015
rafaeleldor.co.il 4/14/2015
talstoff.co.il 4/14/2015
xn—-7hcdbalj0ab8a2fub.com 4/14/2015
xn—–7ldccbapnrqbr5a0a4gg2bm… 4/14/2015
xn—–6ldbcd0anld1bdsn0f7a.com 4/14/2015
tmura.org.il 4/14/2015
zoharnavon.com 4/14/2015
sosnamoving.com 4/14/2015
stavitbartov.com 4/14/2015
segol1.co.il 4/14/2015
shapiratax.co.il 4/14/2015
site.ranad.co.il 4/14/2015
www.ranadtec.co.il 4/14/2015
ranad.co.il 4/14/2015
garage.co.il 4/13/2015
gasgas.co.il 4/13/2015
gazit-poly.co.il 4/13/2015
gazit-polygraph.com 4/13/2015
polygraph-school.com 4/13/2015
gdiet.co.il 4/13/2015
gilinv.betagroup.co.il 4/13/2015
gilinv.co.il 4/13/2015
global-call.co.il 4/13/2015
gni.co.il 4/13/2015
gol-trade.com 4/13/2015
sunparks.co.il 4/13/2015
guterman-law.co.il 4/13/2015
hadassa.co.il 4/13/2015
herman-legal.co.il 4/13/2015
n.hila-hc.co.il 4/13/2015
homeotreat.co.il 4/13/2015
horowitz-group.com 4/13/2015
www.horowitz-group.co.il 4/13/2015
www.horowits-group.co.il 4/13/2015
www.horowits-group.com 4/13/2015
ilanablecher.co.il 4/13/2015
www.isracom.org.il 4/13/2015
www.isracom.org 4/13/2015
jem-electric.co.il 4/13/2015
kelnercustoms.co.il 4/13/2015
www.kci.co.il 4/13/2015
kenafibers.com 4/13/2015
www.kenaf-seeds.com 4/13/2015
keren-or.net 4/13/2015
keshet-t.betagroup.co.il 4/13/2015
keshet-t.co.il 4/13/2015
www.kleinsharon.co.il 4/13/2015
kolhayom.com 4/13/2015
www.kte-ltd.co.il 4/13/2015
kte-ltd.com 4/13/2015
www.xn—-9hckbb5br0ahg.co.il 4/13/2015
www.xn--9dbhabvp4bgg.co.il 4/13/2015
lablabi.co.il 4/13/2015
letsgo-china.com 4/13/2015
lh-lawfirm.co.il 4/13/2015
leylot-rabat.co.il 4/13/2015
new.liotech.co.il 4/13/2015
liotech.co.il 4/13/2015
gsl.co.il 4/13/2015
liritengineering.co.il 4/13/2015
loverevolution.co.il 4/13/2015
www.lya.co.il 4/13/2015
metallic.co.il 4/13/2015
maayanlazar.co.il 4/13/2015
macaw.co.il 4/13/2015
maleor.com 4/13/2015
markovitz.co.il 4/13/2015
martef.org.il 4/13/2015
masa-kolnoey.co.il 4/13/2015
miraar.co.il 4/13/2015
mashaf.com 4/13/2015
maygalim.com 4/13/2015
mdu.co.il 4/13/2015
mechan-europe.com 4/13/2015
medi-market.co.il 4/13/2015
medistaff.co.il 4/13/2015
arcturians.co.il 4/13/2015
meirharan.co.il 4/13/2015
mhlal.com 4/13/2015
michael-klachkin.com 4/13/2015
mikel-eng.co.il 4/13/2015
mirieisin.com 4/13/2015
mirofoods.com 4/13/2015
modiplast.com 4/13/2015
mokedkehila.co.il 4/13/2015
amiash.com 4/13/2015
esliltd.com 4/13/2015
k-eden.biz 4/13/2015
kalanit10.co.il 4/13/2015
mbiton.com 4/13/2015
mbw.co.il 4/13/2015
mbitona.com 4/13/2015
moranb.com 4/13/2015
nenny.co.il 4/13/2015
shay-n.com 4/13/2015
tomerl.net 4/13/2015
udiporat.com 4/13/2015
yairal.com 4/13/2015
zrh11.com 4/13/2015
mshrclean.co.il 4/13/2015
msitech.co.il 4/13/2015
zemer.org.il 4/13/2015
www.2-t.co.il 4/13/2015
myspy.co.il 4/13/2015
myreco.co.il 4/13/2015
naturaisrael.com 4/13/2015
navadv.co.il 4/13/2015
navitpeleg.com 4/13/2015
ncexpert.co.il 4/13/2015
nuvitalityproducts.co.il 4/13/2015
odrahit.co.il 4/13/2015
ofek-kat.co.il 4/13/2015
ofenbari.co.il 4/13/2015
olla.co.il 4/13/2015
omendiecasting.co.il 4/13/2015
or4home.co.il 4/13/2015
orlygutman.co.il 4/13/2015
orvehaim.co.il 4/13/2015
otkids.co.il 4/13/2015
www.galicymerman.com 4/13/2015
s2000.co.il 4/13/2015
shivuk-hagay.co.il 4/13/2015
ortho1.co.il 4/13/2015
xn--8dbbboikisnch5dd4a.com 4/13/2015
naadned.co.il 4/13/2015
bh-sign.com 4/13/2015
orgon.biz 4/13/2015
sadna4u.com 4/13/2015
sarahgillon.com 4/13/2015
hananlevi.co.il 4/13/2015
nautilus.org.il 4/13/2015
www.noya.co.il 4/13/2015
xn--8dbbm0a.com 4/13/2015
www.summerpro.co.il 4/13/2015
aba-group.co.il 4/13/2015
g-reenberg.co.il 4/13/2015
abrahamov.co.il 4/13/2015
aloumim.org.il 4/13/2015
al-group.co.il 4/13/2015
al1-group.co.il 4/13/2015
alpha-marketing.co.il 4/13/2015
www.alter-design.co.il 4/13/2015
amidan.net 4/13/2015
anakhamamtakim.co.il 4/13/2015
anatteva.co.il 4/13/2015
dialoguf.co.il 4/13/2015
avivalentin.com 4/13/2015
avot-meyasdim.co.il 4/13/2015
www.balonim.co.il 4/13/2015
www.balonim.com 4/13/2015
bar-tec.com 4/13/2015
www.bar-tec.co.il 4/13/2015
bbreath.net 4/13/2015
bbreath.com 4/13/2015
bs-bestsourcing.com 4/13/2015
xn--8dbabcaanmqlda9bc4ipbp.com 4/13/2015
xn--8dbckhihpo8cva.co.il 4/13/2015
sys.beta-hosting.com 4/13/2015
bloodpressure.org.il 4/13/2015
boneh-refael.com 4/13/2015
coach-4u.co.il 4/13/2015
cohenmack.co.il 4/13/2015
colombus-sport.co.il 4/13/2015
www.10commandments-method.com 4/13/2015
10commandments-method.org 4/13/2015
comm.10commandments-method.com 4/13/2015
correct.org.il 4/13/2015
curator.co.il 4/13/2015
daat-imun.co.il 4/13/2015
danieldotan.com 4/13/2015
darenlabs.co.il 4/13/2015
dharma-n.com 4/13/2015
donner-tech.com 4/13/2015
pepper.life 4/13/2015
lovememore.co.il 4/13/2015
juicytalk.co.il 4/13/2015
juicy-talk.com 4/13/2015
juicy-talk.co.il 4/13/2015
doritbendor.com 4/13/2015
drorlab.co.il 4/13/2015
ecoprocess.co.il 4/13/2015
elirantama38.co.il 4/13/2015
el-tal.co.il 4/13/2015
endodont.org.il 4/13/2015
es-cpa.co.il 4/13/2015
even-meazvim.co.il 4/13/2015
exotigan.co.il 4/13/2015
nefeshhayeled.com 4/13/2015
fridenson.co.il 4/13/2015
www.mmtrade.co.il 4/13/2015
frigor.co.il 4/13/2015
tdt09.com 4/13/2015
hhkgallery.co.il 4/13/2015
www.hhkgallery.com 4/13/2015
adident.co.il 4/13/2015
www.barshan.com 4/13/2015
barshan.betagroup.co.il 4/13/2015
arcticcat.co.il 4/13/2015
www.haravpinto.com 4/6/2015
www.shuvaisrael.com 4/6/2015
www.pixmed.net 4/2/2015
chiropractor.co.il 4/2/2015
en.ksh.org.il 4/2/2015
pizza2.co.il 4/2/2015
www.ate.co.il 4/2/2015
www.hwarc.com 4/2/2015
www.lifshits.co.il 4/2/2015
www.lop.co.il 4/2/2015
www.telekeys.com 4/2/2015
www.truelove.co.il 4/2/2015
einatgeva.com 4/2/2015
forever.co.il 4/2/2015
rockets.co.il 4/2/2015
series.co.il 4/2/2015
www.allright.co.il 4/2/2015
www.damage.co.il 4/2/2015
www.tutim.co.il 4/2/2015

cjl92339

Endnotes:

[1] Techworld.com, February 17, 2015.

[2] Times of Israel, June 8, 2014. According to the U.S. security group FireEye, Molerats has been engaged in cyber-attacks and phishing scams against Israelis using a tool called Poison Ivy since 2011.

[3] Zone-h.org/archive/notifier=Gaza%20Hacker%20Team?zh=1, accessed March 19, 2015. Zone-H is an archive of defaced websites.