CSIDB logo
Incident

The Jerusalem Post

Incident posture

Attack window
Oct 2023
Location
Israel
Status
Historical
CIA posture
Available to members
Updated
2026-01-06 18:06

Linked entities

Victim
The Jerusalem Post
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Oct 2023
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The Jerusalem Post's website experienced multiple disruptive cyberattacks following a major Hamas assault on Israel, leading to repeated outages. The publication's editor confirmed sustained and devastating attacks targeting their online operations, resulting in significant downtime as they worked to mitigate the incidents. While the organization indicated it had identified potential perpetrators and their origins, specific attribution details were withheld to avoid amplifying the attackers' visibility or incentivizing further assaults.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On October 7, 2023, coinciding with Hamas’s armed assault on Israel, The Jerusalem Post’s website experienced a series of disruptive cyberattacks that persisted into the following day. The publication’s editor-in-chief, Avi Mayer, confirmed to The Daily Beast on October 8 that these attacks had caused multiple outages since hostilities began the previous morning. Mayer characterized the cyberattacks as “devastating” and “successive,” noting they deliberately targeted the outlet during active warfare. Technical teams attempted to mitigate the attacks but were unable to prevent recurring service disruptions, resulting in the website being taken offline intermittently. The timing of the cyberattacks aligned with heightened physical conflict, though Mayer did not specify whether the incidents correlated with particular military developments. No technical details regarding attack vectors—such as DDoS, defacement, or data breaches—were disclosed publicly.

The operational impact centered on website availability, with Mayer confirming the platform had been “taken down several times” during the attacks. While Mayer stated the publication had gathered “indications” about the perpetrators’ identities and geographic origins, he withheld specifics to avoid amplifying the attackers’ visibility or incentivizing further assaults against his organization or other entities. No ransomware demands, data theft claims, or hacktivist statements were referenced in the disclosure. The Jerusalem Post maintained its reporting operations despite the cyber disruptions, though Mayer’s communications emphasized the challenges of managing both warfare coverage and sustained digital attacks. No collateral damage to related systems, third-party services, or subscriber data was mentioned in the available account.

Sources

Sources available to members: 1 source.

CSIDB