Cyber Threat Actor: Intsights

Intsights is an Israeli cyber‑intelligence firm that operates under the alias Intsights. The company is based in Israel and was founded by former officers of the Israel Defense Forces intelligence community. As a private sector entity, it describes its mission as providing cyber‑threat intelligence and investigative services to clients. The firm has presented itself publicly as a source of information on extremist activity online.

In August 2016 Intsights reported that it had gained unauthorized access to an ISIS‑hosted forum on the Telegram messaging platform. By examining the forum’s content the firm said it discovered discussions of forthcoming terrorist attacks. The forum contained a map of United States military bases located in Kuwait, Bahrain and Saudi Arabia, which ISIS members were allegedly considering as targets. The same map also included the locations of Israeli military bases. Intsights told Israeli television channel Channel 10 that the information revealed planning for attacks on those bases, which had been used by the United States and its allies to launch air strikes against ISIS in Syria and Iraq.

The report did not include technical details about how Intsights bypassed Telegram’s encryption or otherwise accessed the forum, so no specific malware families, exploit tools or initial‑access vectors are documented in the source material. The firm’s approach is described only as a hacking operation carried out by its analysts, without reference to any particular tooling style or custom malware. Because the activity was limited to a single observed intrusion into an extremist forum, no larger campaign or series of operations is publicly attributed to Intsights beyond this incident. The operation is cited as an example of the firm’s capability to collect intelligence from dark‑web communications used by terrorist organizations.