‘Israel’ faces sophisticated cyber threats from Iran-linked hacking group: Hebrew media

‘Israeli’ cybersecurity firm Check Point Research has reported the emergence of a new cyber threat from a group connected to Iran.

The hacking group, known as Cavern Manticore and linked to Iran’s Ministry of Intelligence and Security, has developed a specialized set of digital tools to attack organizations in ‘Israel’s’ government and information technology sectors.

The findings were detailed in a report released on Monday.

Researchers at Check Point have been observing the group’s activities since the beginning of 2026. The group shares similarities with other known Iranian cyber groups.

The new tools allow the hackers to control compromised systems from afar while making it more difficult for ‘Israeli’ security software to detect and analyze their actions.

The group’s approach involves installing hidden programs on target networks. These programs can perform various tasks, such as gathering information, moving through systems, and transferring data.

By using legitimate software already present in many organizations, the attackers reduce the chance of raising alarms during the early stages of an intrusion.

A common entry method observed by researchers involves exploiting updates for remote management software, such as tools used by IT support teams. Once inside, the attackers can expand their access, often moving from one IT service provider to another before reaching their main targets in government or related sectors.

‘Israel’ and Iran had an intense cyber conflict going on for years, which surged following the wars in 2025 and 2026.

‘Israeli’ authorities reported thousands of cyber attempts this year, many attributed to Iranian actors.