Introduction
Cyber Caliphate Army is a threat actor tracked by MISP Galaxy. Additional information pending cataloguing.
Activities and Tactics
Country of Origin: 🏳️ [“[ISIS]”]
Notable Campaigns
- 2015-02
- 2015-04
- 2015-06
- 2015-08
- 2015-09
- 2015. This was later discovered to have been a false flag attack by Sofacy
- 2017-04
- 400 Americans and urges attacks
- 786 US Targets For Lone Wolf Attacks
- APT 28
- Compromise of TV5Monde in France
- Fancy Bear
- Five military wives received death threats from a hacker group calling itself “CyberCaliphate”
- ISIS ‘kill list’ includes names of 151 Canadians
- ISIS hackers intercept top secret British Government emails in major security breach uncovered by GCHQ
- ISIS-linked Cyber Group Releases ‘Kill List’ of 8
- Isis ‘hacking division’ releases details of 1
- Sednit
- Tasmania’s Hobart International Airport website has been shut down after it was hacked and defaced with a statement supporting the radical Islamist group
- U.S. military wives’ death threats
- claiming to be an Islamic State affiliate
- ed.)”
- first claimed responsibility. But an investigation now suggests the attack was in fact carried out by a group of Russian hackers. (Sofacy
- https://www.apnews.com/4d174e45ef5843a0ba82e804f080988f
- https://www.bbc.com/news/technology-37590375
- https://www.cbc.ca/news/canada/isis-kill-list-canadians-1.3637214
- https://www.mirror.co.uk/news/uk-news/isis-hackers-intercept-top-secret-6428423
- https://www.newsweek.com/isis-linked-cyber-group-releases-kill-list-8786-us-targets-lone-wolf-attacks-578765
- https://www.telegraph.co.uk/news/worldnews/islamic-state/11531794/Australian-airport-website-hacked-by-Islamic-State.html
- https://www.theguardian.com/world/2015/aug/13/isis-hacking-division-releases-details-of-1400-americans-and-urges-attacks
- linked to so-called Islamic State
- on February 10
- when the victims’ email addresses were found to have been in the Fancy Bear phishing target list.
- “A group calling itself the Cyber Caliphate
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
Information pending cataloguing.
Attribution and Evidence
Country of Origin: [“[ISIS]”] Additional attribution information pending cataloguing.
References
References pending cataloguing.