Cyber Threats Surge Ahead of Israeli Elections
Translated & summarized from Bizportal by baba
Israel is facing a significant surge in cyber threats just days before the upcoming Knesset elections. Over 1,200 new election-related websites have been registered, many suspicious, while organizations are experiencing a 55% weekly increase in cyberattacks. Government and infrastructure sectors are particularly hard-hit, with attacks up 82% and 107% respectively. The dark web shows heightened activity, and old leaked databases are resurfacing, posing risks of phishing and impersonation.
The story in 6 lines · by baba
- Over 1,200 new Israel-related election websites registered, with 1 in 47 deemed suspicious.
- Israeli organizations face 2,700 weekly cyberattacks, a 55% increase year-over-year.
- Government bodies and infrastructure sectors see 82% and 107% increases in attacks.
- Phishing and impersonation attacks targeting voter information are a major public threat.
- Dark web discussions about election-related attacks have increased by 110% since October.
- Leaked voter databases from 2020 have resurfaced, aiding impersonation efforts.
With just two days remaining until the 26th Knesset elections, Israel is experiencing a significant escalation in cyber activity. Over 1,200 new websites related to Israel and the elections were registered in September and October, with one in every 47 flagged as potentially malicious. Concurrently, Israeli organizations are facing an average of 2,700 cyberattacks per week, a 55% increase from the same period last year. These threats combine various types, including phishing sites impersonating voter information services to steal personal details like ID numbers and addresses, as well as attacks targeting government sites, public institutions, and infrastructure to disrupt operations or deface websites.
The surge is particularly acute in public sector and infrastructure entities. Government bodies are experiencing approximately 2,300 weekly attacks, an 82% rise year-over-year, while the energy and infrastructure sector faces around 3,900 weekly attacks, a 107% increase. This aligns with a broader trend, as the National Cyber Directorate reported a 2.5-fold increase in cyber threat alerts in 2025 compared to 2024, with phishing accounting for over half of all reports.
Since the start of October, about 87 confirmed attacks have targeted Israeli entities, many aiming to disable or deface websites. Additionally, information purportedly obtained from breaches, including data on public figures, communications, personal details, and institutional materials, has been published. Analysis indicates that 53% of attributed activist incidents originated from pro-Palestinian sources, 18% from Indonesian groups, and 10% from criminal elements.
The dark web is also showing increased activity, with a 110% rise in discussions about Israel and the elections among attack groups since early October. Targets mentioned include the Prime Minister's Office, the Knesset, Israel Police, the Ministry of Foreign Affairs, and the Bank of Israel. Some discussions call for denial-of-service attacks on election day. Furthermore, an old database containing approximately 6.5 million Israeli voter records, leaked in 2020, has resurfaced, potentially enabling highly convincing impersonation messages. Data on about 38,000 soldiers and police officers has also reappeared from a previous leak.
The State Comptroller had previously warned of gaps in preparedness for foreign influence in the digital space surrounding elections. The most common threat to the public involves seemingly legitimate messages from official-looking services requesting updates for voting. These can lead to further fraud. Organizations are focusing on website protection, multi-factor authentication, monitoring impersonating sites, and preparing backup channels. The public is advised to access government and election committee websites directly for information on polling stations, eligibility, or voting hours. Elections have increasingly become a cyber event, with current numbers indicating a significant jump in activity before polling stations even open, and election day itself expected to be the focal point for attack groups.
Mentioned
