Electronic Operations Room
Electronic Operations Room is described in the provided content as a newly formed pro-Iranian hacktivist or state-aligned persona/collective. It is listed alongside Handala Hack, Cyber Islamic Resistance, Dark Storm Team, and APT Iran as one of the actors that claimed responsibility for over 150 retaliatory cyber operations between February 28 and March 1, during a period of rapid cyber escalation tied to the Iran conflict described in the source. The reported operations attributed collectively to these actors included DDoS attacks, website defacements, wiper malware, ransomware, and claimed industrial-control-system intrusions, with targeting spanning Israeli and Western organizations across energy, finance, healthcare, and critical infrastructure sectors. The content does not provide additional specific attribution, sub-groups, or uniquely identified operations for Electronic Operations Room beyond its inclusion in that cluster of claimed activity.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Energy
- Banks
- Health Care Equipment & Services
- Utilities
Where they target
Geographies tied to known operations.
- 🇮🇱 Israel
Where they're from
Attributed origin per open-source reporting.
- IR
Recent activity
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.