Hacktivist DDoS Attacks Target Organizations Across Multiple Countries
A recent wave of hacktivist activity has resulted in 149 distributed denial-of-service (DDoS) attacks targeting 110 organizations in 16 different countries. The attacks occurred during a period of heightened geopolitical tension following a coordinated military campaign involving the United States and Israel against Iran. Cybersecurity researchers observed that the attacks were largely politically motivated and were aimed at disrupting services belonging to government institutions, financial organizations, telecommunications companies, and other critical infrastructure sectors.
Most of the attacks were concentrated in the Middle East, where more than 100 incidents were recorded. A small number of hacktivist groups were responsible for the majority of the operations. Two groups, Keymous+ and DieNet, carried out nearly seventy percent of the attacks during the first wave of activity between late February and early March. These groups are known for organizing large-scale DDoS campaigns designed to overwhelm websites and online services with massive volumes of traffic, causing disruptions and drawing public attention to their political causes.
Another group connected to the attacks is Hider Nex, also known as the Tunisian Maskers Cyber Force. The group reportedly emerged in mid-2025 and is believed to support pro-Palestinian causes. Researchers say the organization often uses a combination of strategies, including both DDoS attacks and “hack-and-leak” operations. This approach allows the group to disrupt online services while also attempting to expose sensitive data in order to increase pressure on targeted organizations and promote its political messaging.
Security experts warn that this increase in hacktivist activity highlights how geopolitical conflicts are increasingly extending into cyberspace. Hacktivist groups frequently respond quickly to political or military events, using social media and online messaging platforms to coordinate attacks and mobilize supporters. While DDoS attacks typically focus on disrupting services rather than stealing data, they can still cause significant operational problems and financial losses for organizations that rely on constant online availability.
Researchers recommend that organizations strengthen their defenses against traffic-flooding attacks and pay close attention to threat intelligence during times of geopolitical tension. As cyber activism continues to grow, experts expect hacktivist campaigns to become more coordinated and more frequent, especially during international conflicts where digital attacks are used as a form of protest or retaliation.
