Former Hamat Group Security Manager Charged with Hundreds of Cybercrimes

A former information security manager at the Hamat Group, Miki Bar, has been indicted for hundreds of cyber offenses, including hacking into the computers of 26 companies and two kibbutzim between 2019 and 2026. The state alleges that Bar developed malicious software, including Windows malware and Wesearch malware, to gain unauthorized access to these systems. These programs enabled him to collect information, record keystrokes in real-time, monitor user activity, spread through organizational networks, disrupt defense systems, alter operating systems, and search for crypto wallets.

The indictment, filed at the Rishon LeZion Magistrate's Court, states that Bar's primary motive was to track women, including minors, in their homes. He allegedly captured images and documented their activities, sometimes including sensitive personal material, though often not in intimate situations. The state attributes hundreds of offenses to him, including illegal software operations, computer intrusion for other offenses, virus insertion, privacy violations, theft, and illegal software actions. The total damages caused to the companies are estimated at NIS 1.5 million.

Bar reportedly confessed to most of the charges. Evidence against him includes the malware found on his computer, links to servers he used to operate the malware, thousands of stolen files, victim company statements, and the testimonies of 12 women he tracked. The National Cyber Directorate had previously contacted Bar in April, suspecting Hamat Group was among the attacked entities, unaware he was the perpetrator. This led Bar to develop the more sophisticated Wesearch malware after realizing the attacks had been discovered.

The Hamat Group emphasized that the charges relate to Bar's private activities and have no connection to the company's operations. Bar was not in a management position within the company.