Threat Actor Characterization
7 October Union
ID: 06c5dda960d27c5ee1a47364e98d507a| 7 OctoberUnion | 7_October_Union | 7O******* | 7** |
| Oc*************** | Oc*********** | Oc************* | Oc*********** |
Related profiles
| ID | Threat | Origin | Type | Categories | |
|---|---|---|---|---|---|
|
2c5e9d7d9c904bb71fa38130a565bc4438308 | Abo Omar | Lebanon | founder | Cybercrime |
|
ff4082dc4033d04cf7db947f2f05821796400 | Al-Ashtar Cyber | Unknown | related | Hacktivist Group |
|
0945cf65fe78ca62f2ecabe56c4b0c0504558 | AlixSec | Unknown | ally-of | Cybercrime |
|
f5d5f22d89ba6b361538ce0b5f9f88e9 | HighSociety | Unknown | ally-of | Hacktivist Group |
|
17189542de4cc617097bb5248e707a89 | Holy League | Russia | ally-of | Hacktivist Group |
|
4324563b5322b38d31833a74c88177ab | Z-Pentest Alliance | Serbia | related | Hacktivist Group |
Related files
Actor Network Graph
Open Network GraphMITRE ATT&CK®
7 October Union is a pro-Palestinian hacktivist alliance referenced in OSINT as coordinating and amplifying disruptive operations (primarily DDoS) and public claims, often within larger coalitions such as 'Holy League'.
| Technique | Technique name | Tactics | Evidence |
|---|---|---|---|
| T1498 | Network Denial of Service | TA0040 |
|
| T1491.002 | External Defacement | TA0040 |
|
| T1589 | Gather Victim Identity Information | TA0043 |
|
7 October Union — Pro-Palestinian hacktivist alliance / coalition node
Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE
Category: Hacktivism / Coalition — Origin: Not attributed (transnational online movement)
Author: iQBlack CTI Team
Executive Summary
7 October Union (also rendered as “7 OctoberUnion”) is described in multiple OSINT reports as a pro‑Palestinian hacktivist alliance/collective that coordinates or amplifies disruptive cyber operations—primarily DDoS campaigns and public “claim” activity—often in alignment with broader geopolitical narratives tied to the Israel–Hamas conflict.
From mid‑2024 onward, 7 October Union is repeatedly referenced as a coalition participant and/or partner in larger umbrella constructs such as “Holy League,” which vendors describe as a unification of pro‑Palestinian and pro‑Russian hacktivist ecosystems (e.g., High Society + 7 October Union). The practical operational output described in OSINT is coordinated targeting and messaging against Western/NATO-aligned entities and countries perceived as supporting Ukraine or Israel.
Confidence is MEDIUM: the existence and high-level purpose of the alliance is well attested in third‑party reporting, but specific membership lists, leadership identities, and direct technical tradecraft vary by source and are often derived from self-claims on Telegram.
