Qadmon

Summary

Hezbollah's cyber unit Kadimon claimed unauthorized access to security cameras in sensitive Israeli locations, including a Defense Ministry compound, alongside breaching thousands of websites previously. The group released promotional footage showing compromised cameras in public and government areas, though the claims lacked official confirmation; Israeli military leadership asserted existing deterrence capabilities against such threats.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 17, 2016, Hezbollah’s al-Manar television station reported that the Lebanon-based group’s "Kadimon" hacking unit had successfully breached security cameras across multiple Israeli locations, including sensitive sites such as the Defense Ministry’s Kirya compound in Tel Aviv. The announcement, made late on February 14 through a televised promo titled "Shattering the Illusion" in Arabic and Hebrew, featured footage purportedly showing real-time access to cameras in Israeli streets, cafes, and a government office displaying Israeli flags. Hezbollah’s broadcast included the statement, "We will reach you even if you are in your offices. The next step will be greater," signaling an escalation in cyber operations. The group also claimed to have hacked over 5,000 Israeli websites in 2015, including security-related platforms, though no technical evidence or compromised data was disclosed. Israeli media outlet Maariv noted the psychological impact of the promo’s multilingual presentation and its explicit targeting of government facilities.

The Israeli government did not confirm the breach, and no proof was provided to verify whether the accessed camera footage was not already publicly available. In response to the claims, Israel’s top military official asserted that the country maintained "effective deterrence" against Hezbollah’s capabilities. The incident amplified concerns about Hezbollah’s cyber warfare activities, particularly following earlier threats from leader Hassan Nasrallah regarding potential attacks on Israeli chemical plants. While the operational impact remained unverified, the broadcast underscored Hezbollah’s intent to leverage cyber intrusions for psychological and propaganda purposes, marking a public escalation in its adversarial posture toward Israel. No containment measures, technical mitigations, or further retaliatory actions were disclosed by Israeli authorities in the immediate aftermath.

Sources

Sources available to members: 1 source.