Hezbollah's quiet campaign: more than 600 attempts to attack Israel in cyber

The IDF identifies that Hezbollah, in cooperation with Iran, is attempting to harm Israel using an offensive cyber array even during ceasefires. During the war, Hezbollah has attempted to carry out more than 600 cyberattacks against Israel. The IDF states that, so far, no significant successes have been recorded for the organization.

Since October 7, more than 2,500 cyberattacks have been carried out against Israel. The IDF identifies a regional intensification of offensive cyber capabilities and is preparing accordingly. The increasing use of artificial intelligence (AI) allows actors previously considered weak to carry out more advanced and high-quality attacks.

Iran, Hezbollah, and other terrorist organizations operating in Lebanon have been trying in recent years to expand their capabilities and harm Israel through the cyber arena. Hezbollah and Iran view cyber operations as a "quiet campaign," which allows them to continue attempting to attack Israel even during periods when active fire has supposedly ceased.

Facing Hezbollah's offensive cyber array is the Cyber Defense Division in the C4I Directorate, working alongside partners in other security agencies. The IDF notes that the threat does not come only from Lebanon but from across the Middle East, where resources are being invested in offensive cyber arrays.

The personnel of the Cyber Defense Division counter these attempts year-round using dedicated war rooms, red teams, and intelligence systems. The entry of AI into the cyber arena is reshaping both defense and offense. AI tools allow for the detection of security vulnerabilities and, in some cases, are used to conduct the attacks themselves. The Cyber Defense Division is preparing for these developments through advanced capabilities and training adapted to the evolving threat landscape.