Cyber Incident Victim: Haaretz
Date:
Jul 2014
Location:
Israel
Summary
AnonGhost hackers targeted the Israeli newspaper Haaretz, compromising its domain and defacing the website. The attackers claimed unauthorized access to internal systems and theft of unspecified data, framing the breach as a politically motivated protest action. While the full scope of compromised information remains unconfirmed, the incident disrupted the publication's online operations and highlighted vulnerabilities in its digital infrastructure. The group, known for similar cyberattacks aligned with geopolitical agendas, publicly asserted responsibility for the intrusion.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On July 15, 2014, the Israeli newspaper Haaretz experienced a domain compromise attributed to the hacktivist group AnonGhost. The attackers defaced Haaretz’s website, redirecting visitors to a page displaying anti-Israel messages and imagery. This defacement coincided with heightened tensions during the Israeli military operation in Gaza, with AnonGhost explicitly citing the conflict as motivation for the attack. The redirected page featured political slogans condemning Israeli military actions and included symbols associated with Palestinian solidarity. Haaretz’s primary website became inaccessible during the incident, disrupting its digital news distribution. The attack specifically targeted the newspaper’s domain infrastructure rather than its internal networks or data repositories.
Haaretz responded by temporarily taking its website offline to mitigate the defacement and restore operational control. Technical teams worked to remove the malicious redirect and reinstate legitimate website functionality. The incident caused temporary disruption to the publication’s online news services, limiting reader access during the outage. No data breach or theft of journalistic materials was reported in connection with the domain compromise. Service restoration occurred within hours, though the attack highlighted vulnerabilities in the newspaper’s public-facing digital assets. The defacement represented a symbolic protest against Israeli policies rather than a financially motivated cybercrime operation. Haaretz resumed normal operations without disclosing specific security improvements implemented post-incident.