Anonymous Syria Hackers
Anonymous Syria Hackers is described in the content as an anti-Iran, pro-Israel counter-hacktivist group. It targets Iranian government channels, propaganda outlets, Iranian state media, government infrastructure, and IRGC-linked entities. Specifically, the content states that anti-Iran groups including Anonymous Syria Hackers target IRNA, ISNA, PressTV, IRIB, government infrastructure, and IRGC-linked entities. The group is also mentioned as participating in solidarity operations alongside Israeli cyber defenders. Reported activity attributed to Anonymous Syria Hackers includes publishing what it described as a 3.2 GB data leak from an Iranian educational institution linked to Khamenei loyalists under #Op_Iran, and claiming a breach of an Iranian e-commerce platform on March 5, 2026, allegedly exposing PayPal credentials, usernames, email addresses, and bcrypt-hashed passwords. The content also lists Anonymous Syria Hackers among hacking groups targeting Iran, alongside Islamic Hacker Army and Predatory Sparrow, and notes that some such groups may be state-sponsored, but does not directly attribute state sponsorship to Anonymous Syria Hackers.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Academia & Research
- Consumer Discretionary Distribution & Retail
Where they target
Geographies tied to known operations.
- 🇮🇷 Iran
Where they're from
Attributed origin per open-source reporting.
- SY
Tradecraft
4 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
Recent activity
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Pro-Israel counter-hacktivist group targeting Iranian government, propaganda, and IRGC-linked infrastructure.
Pro-Israel actor conducting breach-and-leak operations against Iranian targets, including educational and e-commerce entities, and publishing stolen credential and personal data claims.
Anti-Iran Syrian opposition-aligned group targeting Iranian state media, government infrastructure, and IRGC-linked entities.
Anonymous Syria Hackers is a hacktivist group targeting Iranian organizations, likely using DDoS and data leak tactics.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.