Cyberattacks on Israeli Government Surge 82% Ahead of Elections

In the lead-up to Israel's upcoming elections, a significant surge in hostile cyber activity targeting the state has been recorded, according to new research by cybersecurity firm Check Point. The activity includes increased impersonation attempts, information leaks, and preparations by hacker groups to disrupt government websites. The study, based on monitoring attacks, Telegram channels, and dark web forums, found that Israeli organizations experienced an average of approximately 2,700 cyberattacks per week in the first weeks of October, a 55% increase from the same period last year. The government sector saw an average of about 2,300 weekly attacks, an 82% jump. The energy and infrastructure sectors experienced the sharpest rise, with a 107% increase in attacks, reaching around 3,900 per week.

An additional threat comes from websites impersonating official services. In September and October, Check Point researchers identified over 1,200 new election-related websites in Israel, with one in every 47 classified as malicious. Notably, a phishing site disguised as an official voter information service was discovered, requesting users to verify personal details like ID numbers, addresses, and email addresses. Since the beginning of October, around 87 cyberattacks against Israeli targets have been confirmed, primarily aimed at disabling or defacing websites.

In the past ten days, there has also been an increase in the publication of materials allegedly obtained through attacks, including communications from public officials, personal information, and data related to military facilities. The Iranian hacker group Handala has intensified its publication activities, directly linking them to the elections. Activity on the dark web also reflects this heightened state, with discussions about Israel and the elections among attack groups increasing by 110% in October compared to September.

Potential targets mentioned for denial-of-service attacks include the Knesset, the Prime Minister's Office, the police, the Ministry of Foreign Affairs, and the Bank of Israel, though their mention does not confirm actual attacks. Furthermore, a database containing approximately 6.5 million Israeli voter records, leaked in 2020, has been offered for sale again. Information on 38,000 soldiers and police officers was also presented as a new leak, despite having been exposed in 2025. Check Point emphasizes that such information could be used for targeted scams and voter deception, but these are potential uses, not confirmed incidents.

Sivan Dror, Research Director at Check Point, warned that the days surrounding elections allow threat actors to exploit public attention and amplify their impact. She advised the public to rely on official information channels, avoid submitting details through suspicious links, and verify information before sharing it, stating that wide distribution does not prove reliability.