← Actors

WeRedEvils

Intel Library

WeRedEvils

Threat actorIL0 reports from 0 vendors

WeRedEvils is a hacking group that has claimed responsibility for multiple cyber attacks. They targeted the Iranian Electric Grid and the Tasnimnews website, causing the latter to go offline. The group also claimed to have hacked into Iran's oil infrastructure, causing significant damage. They emerged in response to the Hamas massacre and are believed to be a group of Israeli cyber experts.

Vendor aliases (1)

The same group is tracked under different names by different vendors.

VendorName
VariousWeRedEvils

MITRE ATT&CK techniques (0)

No techniques mapped yet.

Indicators of compromise

No IOCs extracted yet from reports naming this actor.

Report timeline

Every report in the Global Intel Library that names WeRedEvils, newest first. Open any report to see the full analysis with provenance.

    No reports in the Lore library name this actor yet.

    Threat feed IOCs (0)

    Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to WeRedEvils. Each row shows why it was linked and where it came from.

    No feed indicators linked to this actor yet. Feeds are checked every hour.

    Public research & publications (2)

    Open-source reports about this actor collected from MISP Galaxy.