Arab-Israeli Conflict

Iran-linked hackers say they breached Israel Aerospace Industries Servers

Major defense contractor is the most recent victim in a string of cyberattacks on Israeli companies.

By Raphael Kahan and Ynet via Calcalist

Hackers from the Iran-linked Pay2Key group exposed on Sunday a new database of names it claims it stole off servers belonging to Israel Aerospace Industries’ subsidiary Etla Systems.

Among the names was Camila Edry, the company’s head of cyber projects development. “IAI might think they have the most protected network, but this should be backed with proof,” the hackers wrote teasingly alongside the list.

The group also wrote that the most “interesting part” of Elta Systems’ servers would be access to the company’s files – which include various classified projects, videos, and research.

IAI is Israel’s largest aerospace and defense company specializing in developing and manufacturing advanced weapons and defense systems for all branches of the military as well as cyber and homeland security.

Elta is one of Israel’s leading defense electronics companies, developing and manufacturing radars, early warning systems, communication and intelligence technologies, electronic warfare technologies, and cybersecurity products.

“Do I have possession of them? Who knows,” the hackers wrote.

No ransom demands have been made publicly so far.

Pay2Key malware has been used to blackmail several Israeli companies throughout the past two months. Most recently it announced it had breached the servers of Intel owned Habana Labs.

The Pay2Key malware is not as sophisticated as the tools used to carry out the massive cyberattack against U.S. targets that has been revealed in recent days. But it should not be taken lightly. According to the group’s pattern of behavior, they will attempt to sell any data they managed to steal back to IAI, and if negotiations break down may try their luck on the open market.

Israeli cyber experts estimate that Pay2Key is not officially linked to the Iranian regime, but it is based in Iran or operated by Farsi-speaking hackers. Their actions are believed to be financially motivated, and not for spying or strategic purposes.

Share
Published by
Atara Beck
Tags: Cyber attack Hackers Iranian threat Pay2Key

Recent Posts

  • Israel News

Ofer Winter makes mandatory service condition for joining Netanyahu government

Winter said combat soldiers and reservists would receive the highest priority for state benefits.

5 hours ago
  • Source-WIN

Trump team avoiding war before midterms; president says Israel won’t be drawn into conflict

The Trump administration is instead emphasizing economic pressure on Tehran in hopes of securing concessions…

6 hours ago
  • Videos

WATCH: Israel’s drone fleets respond to emergencies in seconds

Israel is rolling out autonomous drone fleets across cities in a new emergency response initiative,…

6 hours ago
  • Arab-Israeli Conflict

Katz: No solution for Gaza without emigration, but Trump temporarily froze plan

Katz: '80% want to emigrate. We check this constantly in polls.'

7 hours ago
  • World News

Mossad chief says sanction easing has removed Syria’s motivation to make security deal with Israel

Turkey's presence within Syria may create another impediment to a Syria-Israel agreement.

7 hours ago
  • Analysis & Opinion

Nothing spontaneous about anti-Israel protests

For the past nearly three years, Jews everywhere have borne the brunt of the deep…

7 hours ago