AnonGhost

AnonGhost is a pro-Palestinian hacktivist group active in conflict-driven cyber operations against Israeli and, at times, U.S.-linked targets. The group is best known for operations during the October 2023 Israel-Hamas war, including the compromise of Israel’s Red Alert missile-warning application through exploitation of an API vulnerability to send false emergency notifications. AnonGhost has also been associated with malicious Red Alert-themed activity targeting Israeli users and with public claims of identifying vulnerable Israeli systems for exploitation. The group’s activity is primarily consistent with hacktivist disruption and propaganda objectives rather than covert espionage. Reported operations include reconnaissance and large-scale scanning, exploitation of exposed vulnerabilities, distributed denial-of-service activity, website targeting, and information operations intended to create fear or confusion among civilian users. AnonGhost has been described as reconnaissance-focused and has publicly shared evidence of broad scanning of U.S. network ranges. It has also been observed participating in anti-Israel campaign ecosystems and collaborating or aligning with other hacktivist groups, including T3 dimension Team, Reliks Crew, and BD Anonymous. In later conflict-related reporting, AnonGhost appeared among anti-Israel and pro-Iran-aligned hacktivist clusters mobilized during broader regional escalation. Known aliases include anon_ghost. The group is associated with politically motivated cyber operations in support of the Palestinian cause, with targeting centered on Israel and occasional spillover toward the United States.