From 40fb100ff9a6575d5cca3967c93b6fd17ed9ac99 Mon Sep 17 00:00:00 2001
From: Mathieu Beligon <mathieu@feedly.com>
Date: Tue, 7 Nov 2023 14:47:12 +0100
Subject: [PATCH] [threat-actors] Add Altahrea Team

---
 clusters/threat-actor.json | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 5eb2dcb2..98f03650 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12580,6 +12580,22 @@
       },
       "uuid": "286db62d-859d-48e2-9601-1b7abde9f3c3",
       "value": "Cyber Av3ngers"
+    },
+    {
+      "description": "Altahrea Team is a pro-Iranian hacking group that has been active since at least 2020. The group has claimed responsibility for a number of cyberattacks, including DDoS attacks against Israeli websites, a hack of the Israel Airports Authority website, and a cyberattack on the Orot Yosef power plant in Israel.",
+      "meta": {
+        "country": "IQ",
+        "refs": [
+          "https://securelist.com/ddos-attacks-in-q2-2022/107025/",
+          "https://www.timesofisrael.com/cyberattack-on-health-ministry-website-blocks-overseas-access/",
+          "https://techmonitor.ai/technology/cybersecurity/alahrea-team-power-plant-fire-israel",
+          "https://www.presstv.ir/Detail/2022/07/27/686324/Iraqi-hacker-group--ALtahrea-Team--targets-Israeli-IT,-e-commerce-companies-with-major-cyber-attack",
+          "https://www.hackread.com/pro-iran-altahrea-hit-port-of-london-website-ddos-attack/",
+          "https://nsi-globalcounterintelligence.com/cyber-security/pro-iran-hackers-target-israel-airports-authority-website/"
+        ]
+      },
+      "uuid": "b87f9ba7-f480-4ed5-b60e-b880e6b519ea",
+      "value": "Altahrea Team"
     }
   ],
   "version": 292