Operation Electric Powder

Operation Electric Powder is a threat actor operation that was actively involved in targeted attacks against Israeli organizations between 2016-2017. This operation, as previously reported by ClearSky, has been linked to the threat actor known as Gaza Cybergang, also referred to as Molerats. The cybersecurity industry identified Operation Electric Powder through its unique characteristics, which were shared among multiple variants of SysJoker, a sophisticated malware used in cyber-attacks. A deep analysis of newly discovered variants of SysJoker revealed ties to undisclosed samples from Operation Electric Powder. This connection suggests that these operations may share common origins or operators. It's noteworthy that these specific traits of SysJoker are only shared with one other campaign, further highlighting the significant association with Operation Electric Powder. In addition to these connections, Check Point and ClearSky have observed behavioral similarities between SysJoker variants and Operation Electric Powder. These similarities suggest a possible overlap in tactics, techniques, and procedures (TTPs) used by the threat actors behind these campaigns. The continued investigation into these connections will be crucial in developing defenses against future threats posed by these and related threat actors.