Cyber Av3ngers

Executive Summary

Cyber Av3ngers, also known as CyberAv3ngers or Shahid Kaveh Group, is a hacktivist group primarily targeting government and energy sectors in the United States. Known for conducting DDoS attacks and claiming breaches of critical infrastructure with supporting data leaks, this group’s activities suggest a focus on disrupting operations and making political statements.

Goals & Targeting

The group's goals appear to align with disruptive activities against perceived adversaries, targeting critical infrastructure sectors such as government and energy where impact is likely maximized. Their focus on the United States suggests a broader geopolitical agenda or response to specific policies.

Cyber Av3ngers is an active hacktivist group that has historically targeted Israeli critical infrastructures through DDoS attacks and data breaches. While their primary activity has been in the Middle East, recent shifts in targeting indicate a potential expansion to the United States. This group’s tactics include disrupting operations and leaking sensitive information, often with political or ideological motives.

Key Capabilities

• Conducting DDoS attacks
• Initiating data breaches
• Supporting attacks with data leaks
• Possibly using basic social engineering techniques

MITRE ATT&CK Tactics

ATT&CK Techniques

Software / Tooling

Campaigns & Victims

Cyber Av3ngers appears to target sectors where high-impact disruptions can be achieved, with a focus on critical infrastructure and government entities. The group's operations in the United States suggest an expansion beyond their traditional Middle Eastern theater, potentially indicating evolving strategic priorities.

IOC Patterns

• DDoS attack patterns
• Presence of data exfiltration tools
• Network scanning and probing
• Use of exploit scripts

Recommended Actions

• Implement robust DDoS protection measures
• Monitor for signs of unauthorized access to critical systems
• Conduct regular employee training on phishing and social engineering threats
• Enhance network segmentation to limit lateral movement
• Maintain strong patch management practices
• Consider threat hunting to detect potential advanced attackers

Suggested Tags