Qadmon

Profile narrative

Qadmon, also known by the alias Kadimon, is identified as a cyber unit associated with Hezbollah, the Lebanese political and militant organisation. Based on the available information, the group's primary activity revolves around offensive cyber operations, with a particular focus on Israeli targets. The unit has publicly claimed responsibility for unauthorized access to security camera networks in sensitive Israeli locations, including a site described as a Defense Ministry compound. Alongside these camera intrusions, the group has asserted involvement in breaches affecting thousands of websites. The claims were accompanied by promotional footage intended to demonstrate access to cameras situated in both public and government areas, though the full extent and authenticity of these intrusions were not independently confirmed by Israeli authorities at the time.

The single documented incident associated with Qadmon dates to February 14, 2016, when the group's claims regarding compromised security cameras received public attention. Israeli military leadership responded to the assertions by emphasizing existing deterrence capabilities against cyber threats, without explicitly confirming or denying the specific breaches claimed by the group. This public posture suggests that even when specific intrusions are unverified, Israeli officialdom treats Hezbollah-affiliated cyber activity as a recognised operational concern. The promotional nature of the released footage, showing camera feeds from government and public spaces, indicates an intent to project capability and influence perception rather than to extract overt tactical value from the compromised systems. The combination of website defacements and camera intrusions points to a dual emphasis on symbolic disruption and on demonstrating reach into physical security infrastructure.

Qadmon operates as a specialised cyber component within a broader organisational structure, drawing on Hezbollah's established networks and ideological framework. Its geographic and operational focus is centred on Israel, reflecting the longstanding regional tensions between the two entities. The group's public-facing communications, including the release of curated footage, suggest an awareness of media and psychological dimensions of cyber operations, treating digital intrusions as tools for messaging as much as for intelligence collection or disruption. No information is available regarding the specific size of the unit, its technical personnel, or its formal hierarchical placement within Hezbollah, and any broader structural details remain outside the scope of the documented material. The headquarters is identified as being in Israel in the provided context, though the group's operational association with Hezbollah suggests its activities are directed at Israeli targets from outside Israeli jurisdiction. Based strictly on the available source material, the documented footprint of Qadmon remains limited to the 2016 incident and the claims surrounding it, with no further operational history, scale metrics, or organisational particulars confirmed.

Incidents

1 incident linked to this organisation.