Israel Braces for Election Day Cyberattacks

Israel is experiencing a significant surge in cyberattacks targeting companies and government institutions ahead of its elections, with preparations underway for large-scale disruptions on election day itself. Data released by the Israeli cybersecurity firm Check Point on Sunday, October 25, indicates a heightened threat landscape, with Israel frequently targeted by state-sponsored groups, particularly from Iran, and ideologically motivated independent hackers.

In the first weeks of October, Israeli organizations faced an average of 2,700 weekly cyberattack attempts, a 55% increase compared to the same period in 2025. The public sector saw a 82% rise to 2,300 weekly attempts per organization. The energy and infrastructure sectors experienced the most dramatic increase, with a 107% jump to 3,900 weekly attempts. Since the beginning of October, Check Point has identified 87 successful cyberattacks, many resulting in website outages or content alterations. The company also noted increased public activity from anti-Israeli hacker groups, including Iranian ones, publishing alleged stolen data such as videos, photos, and personal information of prominent figures, military bases, and public officials.

The Iranian hacker group Handala has notably intensified its publications, directly linking its activities to the upcoming Israeli elections. Analysis shows 53% of incidents are attributed to pro-Palestinian hacktivists, 18% to Indonesian hacktivists, and 10% to criminal groups.

Phishing attacks have also adapted to the election period, with approximately 1,200 election-related websites created in September and October, 25 of which are suspected of criminal intent. One detected scam involved messages impersonating an official "Voter Information Service," directing users to malicious sites to steal personal data like ID numbers and addresses.

Furthermore, dark web activity concerning the elections has surged by 110% since September. Discussions focus on disrupting major Israeli websites on election day through Distributed Denial of Service (DDoS) attacks. Potential targets include the Prime Minister's office, the Knesset, the Israel Police, the Ministry of Foreign Affairs, the Bank of Israel, and the Yashar party website. A database allegedly containing information on 6.5 million voters is also reportedly for sale on the dark web.

Sivan Dror, Director of Research at Check Point, stated that the days surrounding elections are critical for attackers to leverage public attention. She urged organizations to ensure robust security for their websites and accounts and to prepare for rapid response. Dror advised citizens to use official information channels, avoid sharing personal data via suspicious links, and verify information before spreading it.

In response to these threats, Israel's National Cyber Directorate has issued recommendations for voters, emphasizing the use of official sources, caution with links in messages, verification of information before sharing, and reporting compromised websites to the National Cyber Incident Response Center.