Who masterminded largest-ever cyberattack on Israel?
Defence officials point finger at Iran after government websites knocked offline

Israel’s Defence Ministry is scrambling to identify the perpetrator of a large-scale cyberattack that brought down a string of government websites.
Targets included the websites of the prime minister and the ministries of defence and the interior, in what was believed to be “the largest-ever cyberattack on the country”, Al Jazeera reported.
Israel’s National Cyber Directorate (NCD) said the assault was a “denial of service” attack – in which cybercriminals “overwhelm their victims’ servers with a flood of data requests to paralyse them”, the broadcaster explained.
Subscribe to The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

Sign up for The Week's Free Newsletters
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
‘Dramatic increase’
The NCD “declared a state of emergency in order to study the extent of the damage caused by the ‘massive’ cyberattack” on Monday evening, when government websites were knocked offline for more than an hour, The Times of Israel reported.
In a statement during the outage, the Communications Ministry said: “Operations have been carried out by communications companies in order to return the service as soon as possible, and the service is gradually returning. The ministry will continue to monitor [the situation] until full restoration.”
The country’s “defence establishment” was also “checking strategic Israeli websites and government infrastructure, such as Israel's electric and water companies, to see whether they were also attacked”, Haaretz reported.
But the chief targets appeared to have been “websites using the .GOV.IL domain, which is used for all government websites save for defence-related ones”, the news site added.
The NCD last year warned of “a dramatic increase” in the “scale and quality of cyberattacks worldwide and in Israel”, Al Jazeera said.
Foreign enemy
A senior defence official told Haaretz that they believed “a state actor or large organisation” carried out the latest attack. But Israel has yet to name any suspects.
The attack followed allegations of a failed Mossad operation against Iran.
According to Iranian media, the Israeli intelligence service attempted to attack “the Islamic Republic of Iran’s key Fordow nuclear enrichment site”, said The Jerusalem Post. But “there was no way to independently confirm the report”.
Iran “frequently claims to have busted Mossad cells when actually it is merely arresting local opposition elements”, the paper continued. However, “some speculated” that the cyberattack “was part of Iranian retaliation for the alleged attempted sabotage of Fordow”.
Previous hacks on Israeli websites have also been “attributed to attackers linked to Iran”, said Al Jazeera. The two rival nations have long been “locked in a shadow war that includes cyberattacks as well as the targeting of physical sites”.
The New York Times reported last November that both countries had broadened their cyberwar “to attack civilian targets”, after a cyberattack on Iran’s nationwide fuel distribution system “paralysed” the country’s 4,300 gas stations.
The outage “was followed days later by cyberattacks in Israel against a major medical facility and a popular LGBTQ dating site”, the paper said – attacks that Israeli officials blamed on Tehran or Iranian-backed groups.
While Iran was still investigating the latest cyber assault, former senior Israeli cyber authority official Rafael Franko told The Jerusalem Post that a hacking group affiliated to Iran was “behind cyberattacks on the diamond exchange over the weekend”.
He warned that Israel should remain high alert “during this rocky period and leading into the Passover holiday, when Israeli adversaries often mount cyberattacks”.
A free daily email with the biggest news stories of the day – and the best features from TheWeek.com
-
Pros and cons of a wealth tax
Pros and Cons Raising revenue and tackling inequality vs. the risk of capital flight and reduced competitiveness
-
The best film prequels of all time
The Week Recommends Balancing new information with what the audience already knows is a perilous tightrope
-
Sudoku medium: July 15, 2025
The Week's daily medium sudoku puzzle
-
Iran still has enriched uranium, Israeli official says
Speed Read It remains unclear how long it would take Iran to rebuild its nuclear program following US and Israeli attacks
-
Israel's plan for confining all Palestinians in 'humanitarian city'
The Explainer Defence minister wants to establish zone in Gaza for displaced people – which they would not be allowed to leave – prompting accusations of war crimes
-
IAEA: Iran could enrich uranium 'within months'
Speed Read The chief United Nations nuclear inspector, Rafael Grossi, says Iran could be enriching uranium again soon
-
The armed clan allied with Israel in Gaza
Under the Radar Self-styled 'Popular Forces' has been denounced by its Bedouin tribe and Hamas for 'collaborating' with Israel
-
One year after mass protests, why are Kenyans taking to the streets again?
today's big question More than 60 protesters died during demonstrations in 2024
-
Iran nukes program set back months, early intel suggests
Speed Read A Pentagon assessment says US bombing of Iranian nuclear sites only set the program back by months, not years. This contradicts President Donald Trump's claim.
-
Trump says Iran and Israel agreed to ceasefire
Speed Read This followed a night of Israeli airstrikes on Tehran and multiple waves of missiles fired by Iran
-
How developed was Iran's nuclear program and what's left now?
Today's Big Question Israel and the United States have said different things about Iran's capabilities