Altahrea Team
Attribution profile
- Type
- Activist
- Location
- Iraq
- Known incidents
- 9 incidents
- Sources
- 6 sources
- First seen
- 2022-04-19
- Last seen
- 2022-07-17
- Updated
- 2026-10-15 00:24
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Altahrea Team, also known as al-Tahera, is a hacking group based in Iraq that is described as pro‑Iranian and thought to consist of Iranian hackers or Iraqi supporters of Iran, with reported links to Iraq’s Popular Mobilization Units. The group has carried out politically motivated disruption operations, primarily using Distributed Denial of Service (DDoS) attacks against Israeli government, defense, municipal, media and infrastructure targets, as well as against the Port of London Authority in the United Kingdom. In addition to DDoS, the group has claimed responsibility for compromising remote management systems of Israeli facilities, such as a power plant’s energy measurement system, although security experts have questioned the plausibility of those claims. Representative operations include the July 2022 DDoS that blocked overseas access to the Israeli Health Ministry website, the May 2022 DDoS that disrupted the Port of London Authority’s website, and the April 2022 wave of DDoS attacks that took down several Israeli broadcasters, the Aviation Authority and Kan broadcasting corporation. The group’s activity is framed as retaliation for Israeli actions in Gaza, sanctions on Iran and the assassination of Iranian commander Qasem Soleimani.
Incidents
Attributed incidents are available to members.
9 incidentsSources
Sources available to members: 6 sources.