news.mlab.sh
Threat intelligence
Threat actor

Syrian Electronic Army (SEA)

Profile from actors.mlab.sh, coverage from our own index.

Suspected origin
Syria
First seen
2011-01-01 00:00:00
Motivation
Information theft and espionage
Targeted sectors
Defense, Government, High-Tech, Media, Retail, Telecommunications
TLP
WHITE

(Qihoo 360) In April 2011, only days after anti-regime protests escalated in Syria, Syrian Electronic Army (SEA) emerged on Facebook to support the government’s Syrian President Bashar al-Assad. In May 5, 2011 the Syrian Computer Society registered SEA’s website (syrian-es.com). Because Syria's domain registration authority registered the hacker site, some security experts have written that the group was supervised by the Syrian state. SEA claimed on its webpage to be no official entity, but 'a group of enthusiastic Syrian youths who could not stay passive towards the massive distortion of facts about the recent uprising in Syria'. As soon as May 27, 2011 SEA had removed text that denied it was an official entity. On the new page, the description of 'not an official entity' was removed, only says that it was established by a group of young Syrian enthusiasts to combat the use of the Internet, especially people that use of Facebook in Syria to 'spread hatred' and 'destroy peace'. The Syrian Electronic Army uses spam, website defacement, malware, phishing and denial of service attacks against political opposition groups, Western news agencies, human rights groups and seemingly neutral websites for Syrian conflicts. It also attacked government websites in the Middle East and Europe as well as US defense contractors. The Syrian Electronic Army is the first Arab organization to set up a public Internet army on its national network to openly launch cyber-attacks on its enemies. Syrian Electronic Army has 2 subgroups: 1. Subgroup: Goldmouse, APT-C-27 2. Subgroup: Pat Bear, APT-C-37

Also known as

ATK 196Deadeye JackalSyria Malware TeamSyrian Electronic ArmyTAG-CT2

Coverage 2