A hacker group linked to Iran has infiltrated the servers of the Israeli web hosting site Cyberserve, removing several of their websites and threatening to leak data.
On Friday, the hacker group, Black Shadow, messaged the Telegram account of Cyberserve, alerting the company to their attack.
“We have news for you,” the message read. “You probably cannot connect to many sites tonight, and that is because the Cyberserve company and its customers were targeted by us. And what about information? As usual, we have a lot of it. And if you do not want your information revealed, contact us soon.”
Cyberserve’s customers.
Based on past activity, the hackers are likely to leak information in the coming days or weeks.
Black Shadow, described by experts as a hacktivist group which uses cybercrime techniques for both financial and ideological ends, hacked KLS Capital, an Israeli financing company, in March.
Does crime pay? A conversation with a hacker targeting Israel
‘Iranian attacker impersonating Russians’: Inside recent attacks on Israel
‘You have 24 hours’: Hackers demand $1m ransom from Israeli firm
In December 2020, the group also infiltrated the Israeli insurance firm Shirbit, stealing large amounts of data from the company’s servers before demanding a one million dollar ransom and gradually leaking much of the information online.
While so-called classic cybercriminals usually negotiate quietly with their victims, Black Shadow is characterized by leaking and sharing their stolen information online. This behavior has led some to question the motives behind their attacks. It seems, experts said, that the attack could have been the work of a group with ideological and anti-Israel motives rather than financially motivated.