Cyber ‘mujahideen’ urged to ‘close the gaps’ as ‘double the force’ vowed in response to hit on Iran school

Pro-Iran hackers urged “epic war” allies to stand as unified “mujahideen” as one team within their coalition decided to withdraw and settle into a neutral position due to Iran’s attacks on Kurdish territory and forces.

Cyber Islamic Resistance, a pro-Iran hacking collective, posted a video Wednesday on its Telegram channel with a shadowy figure at a computer and English subtitles encouraging “mujahideen … who stand guard on the frontiers in the great battle of epic war” to “straighten the rows among yourselves and close the gaps in the jihad to which you have marched.”

“Put your trust in God and work towards the removal of this occupier and to liberate our holy lands from their defilement,” the video said, adding that “the great revenge for our leaders is the guiding light of our path” as well as retribution for the deaths of civilians “whose pure blood was spilled by the invading occupiers.” The message was signed off by “your brother Abu Omar, commander of the electronic Islamic resistance axis.”

Cyber Islamic Resistance followed this with a Saturday post on X: “In response to the attacks that targeted isolated seminaries in Iran, particularly the direct assault on a school in the city of Minab that claimed the lives of 165 female martyrs, the leadership of the Islamic Resistance Axis has decided to respond to this sinful aggression with double the force, and has declared all targets within the occupying entity permissible for its mujahideen.” The Pentagon says it is investigating the Feb. 28 hit on the elementary school that occurred as strikes were targeting an adjacent Islamic Revolutionary Guards Corps naval base.

Across pro-Iran portals, some groups echoed what they saw as a religious “obligation” to act for those able to jump into the cyberwar declared by pro-Iran hackers.

“Defending Iran against American-Israeli Occupation Through Arms, life and Wealth is an Obligation for Muslims around the world!!” the group Sylhet Gang-SG posted on its Telegram channel Friday. “There should be no way Tehran falls to Occupation!!”

DieNet claimed to have hit the my.gov.il Israeli government services portal Thursday and on Friday said it was targeting several Qatari government websites “in response to the country’s media blackout regarding Iranian attacks on U.S. military bases located within its borders.”

“DieNet doesn’t care whether you use WAF or CDN services or not,” the group said Friday on its Telegram channel. “DieNet has just destroyed one of Qatar’s most important servers under the Amazon Technologies Inc. network with a massive IP address network. We’re not kidding.”

The group said that, collectively, it had sent “nine billion requests to several servers in the Gulf region” and “those numbers may increase soon.”

DieNet claimed Saturday that they had “initial reluctance to target” Gulf states but vowed to “continue and intensify” attacks because they host U.S. forces.

The Islamic Cyber ​​Resistance in Iraq – 313 Team said today that its attack against 26 Kuwaiti government sites, which it first announced Friday, was “continuing with increased intensity.”

“The attack, which has shut down Kuwaiti government servers and websites, has now lasted 72 consecutive hours,” the group claimed.

The Cyb3r Drag0nz Kurdish team claimed Wednesday on its Telegram channel to have hacked the site of Qatari glass manufacturer Seedeco, and as of Sunday the site just displayed a joint claim from Cyb3r Drag0nz, Cyber ​​Islamic Resistance, 313 Team, FAD Team, Cyber Fatteh Team, liwaamohammad, Conquerors Electronic Army, Mhawear, Tharullah Brigade, Moroccon Black Cyber Army, RipperSec and Systemadminbd.

“The great epic battle will burn everything in its path,” they posted on the company’s website.
“Wait for us.”

Yet later on Wednesday, Cyb3r Drag0nz posted a statement on Telegram declaring that they had “decided to withdraw from the coalition of the Islamic Cyber ​​Front due to the continuous attacks of the Islamic Republic of Iran on Kurdistan territory and attacks on Kurdish forces.”

While the team said it would immediately “withdraw from all alliances and choose neutrality in this war,” the hackers vowed to “respond strongly to any attempt to invade the holy land of Kurdistan.”

On the side of hackers operating against the Iranian government, Troll Hacker Team said in a Thursday post on its Telegram channel that it was responsible for a breach of the Islamic Republic of Iran Broadcasting’s Channel 2, using the access to play a message encouraging rebellion against the regime from Reza Pahlavi, son of the late shah.

“The technical team hurriedly started to investigate, but all physical and virtual access ports were locked,” Troll Team said of the IRIB staff. “The main signal, which should be completely secure, was suppressed by a strange data stream. For a moment, it seemed as if complete control of the network had fallen into the hands of an invisible force that only wanted to send a symbolic message. After five minutes of complete confusion, the main picture returned with a feed from the control room and everything returned to normal, as if nothing had happened, except for those five minutes of sudden silence across the country.”

Troll Team added, “We warn the teams affiliated with the Islamic Republic’s government for several days that all your pictures and your families will be sent to the relevant organs and you will soon be punished for your actions.”

According to CyberKnow’s war CyberTracker, updated Friday, 84 hacking groups are engaged in the conflict — 12 against Iran (including new entrant Anonymous Syria) and 72 pro-Iran (including pro-Russia Cardinal, which claimed to have breached radar control systems and Israel’s Iron Dome missile defense system).