Who masterminded largest-ever cyberattack on Israel?
Defence officials point finger at Iran after government websites knocked offline

Israel’s Defence Ministry is scrambling to identify the perpetrator of a large-scale cyberattack that brought down a string of government websites.
Targets included the websites of the prime minister and the ministries of defence and the interior, in what was believed to be “the largest-ever cyberattack on the country”, Al Jazeera reported.
Israel’s National Cyber Directorate (NCD) said the assault was a “denial of service” attack – in which cybercriminals “overwhelm their victims’ servers with a flood of data requests to paralyse them”, the broadcaster explained.
The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

Sign up for The Week's Free Newsletters
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
‘Dramatic increase’
The NCD “declared a state of emergency in order to study the extent of the damage caused by the ‘massive’ cyberattack” on Monday evening, when government websites were knocked offline for more than an hour, The Times of Israel reported.
In a statement during the outage, the Communications Ministry said: “Operations have been carried out by communications companies in order to return the service as soon as possible, and the service is gradually returning. The ministry will continue to monitor [the situation] until full restoration.”
The country’s “defence establishment” was also “checking strategic Israeli websites and government infrastructure, such as Israel's electric and water companies, to see whether they were also attacked”, Haaretz reported.
But the chief targets appeared to have been “websites using the .GOV.IL domain, which is used for all government websites save for defence-related ones”, the news site added.
A free daily email with the biggest news stories of the day – and the best features from TheWeek.com
The NCD last year warned of “a dramatic increase” in the “scale and quality of cyberattacks worldwide and in Israel”, Al Jazeera said.
Foreign enemy
A senior defence official told Haaretz that they believed “a state actor or large organisation” carried out the latest attack. But Israel has yet to name any suspects.
The attack followed allegations of a failed Mossad operation against Iran.
According to Iranian media, the Israeli intelligence service attempted to attack “the Islamic Republic of Iran’s key Fordow nuclear enrichment site”, said The Jerusalem Post. But “there was no way to independently confirm the report”.
Iran “frequently claims to have busted Mossad cells when actually it is merely arresting local opposition elements”, the paper continued. However, “some speculated” that the cyberattack “was part of Iranian retaliation for the alleged attempted sabotage of Fordow”.
Previous hacks on Israeli websites have also been “attributed to attackers linked to Iran”, said Al Jazeera. The two rival nations have long been “locked in a shadow war that includes cyberattacks as well as the targeting of physical sites”.
The New York Times reported last November that both countries had broadened their cyberwar “to attack civilian targets”, after a cyberattack on Iran’s nationwide fuel distribution system “paralysed” the country’s 4,300 gas stations.
The outage “was followed days later by cyberattacks in Israel against a major medical facility and a popular LGBTQ dating site”, the paper said – attacks that Israeli officials blamed on Tehran or Iranian-backed groups.
While Iran was still investigating the latest cyber assault, former senior Israeli cyber authority official Rafael Franko told The Jerusalem Post that a hacking group affiliated to Iran was “behind cyberattacks on the diamond exchange over the weekend”.
He warned that Israel should remain high alert “during this rocky period and leading into the Passover holiday, when Israeli adversaries often mount cyberattacks”.
-
Israel and Hamas meet on hostages, Trump’s plan
Speed Read Hamas accepted the general terms of Trump’s 20-point plan, including the release of all remaining hostages
-
Netanyahu agrees to Trump’s new Gaza peace plan
Speed Read At President Trump's meeting with Israeli Prime Minister Benjamin Netanyahu, they agreed upon a plan to end Israel’s war in Gaza
-
Russia is ‘helping China’ prepare for an invasion of Taiwan
In the Spotlight Russia is reportedly allowing China access to military training
-
Israel and the Gaza flotilla
The Explainer Activists fear loss of life after blaming Israel for drone attacks on ships
-
Interpol arrests hundreds in Africa-wide sextortion crackdown
IN THE SPOTLIGHT A series of stings disrupts major cybercrime operations as law enforcement estimates millions in losses from schemes designed to prey on lonely users
-
What would happen if Israel lost America’s support?
Today’s big question Loss of US backing could be a ‘catastrophe’ for Israel
-
Gaza genocide: will UN ruling change anything?
Today's Big Question Commission of inquiry’s findings ‘give unprecedented weight’ to genocide claims
-
Why ‘anti-Islam’ bikers are guarding Gaza aid sites
In The Spotlight Members of Infidels MC, who regard themselves as modern Crusaders, among private security guards at Gaza Humanitarian Foundation sites