3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
Gaza Children's Hacker Group

Gaza Children's Hacker Group

ID: a6a36f978bdef2934a0b9a06e0336d1142228
Hacktivist Group Hacktivism
Threat types: Hacktivism, Data Leak, Intrusion, Pro-Palestine
Palestine AZE, ISR, USA
Updated: 2026-04-12
Created: 2026-01-26
Progress: 92% Completeness: 88% Freshness: 100%
Operation zone: Azerbaijan, Israel, United States
Aliases Limited alias preview
Babies of Gaza Hacker Group gaza children Ga******************* Ga*******************
Ga******************* תי************************* — —
Showing 2 of 6 aliases in free preview.
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: medium
Actor Techniques page ATT&CK® Diagram

Telegram-centric pro-Palestinian hacktivist brand associated in OSINT with DDoS-style disruption and at least one reported data-leak claim targeting Israeli defense-related entities.


Technique Technique name Tactics Evidence
T1499 Endpoint Denial of Service TA0040
  • 2025-07-01 — CTI reporting describes hacktivist activity dominated by DDoS; Gaza Children’s Group is referenced within these disruptive campaign windows. · ref
  • 2025-07-03 — Secondary reporting quoting KELA notes Gaza Children’s Group activity during a coordinated offensive window (availability disruption claims). · ref
T1567 Exfiltration Over Web Service TA0010
  • 2024-07-21 — INFERENCE (confidence: medium): A reported ‘leak’ implies data was moved to an external dissemination mechanism; Telegram-based leak distribution suggests exfiltration/disclosure via a web service, but original exfil path is not public. · ref
T1585.001 Social Media Accounts TA0042
  • 2026-02-20 — INFERENCE (confidence: medium): The group maintains public persona infrastructure (primary + backup Telegram channels) for branding and claim operations; this maps to establishing/maintaining accounts for influence/coordination. · ref
T1491.002 External Defacement TA0040
  • 2025-07-01 — INFERENCE (confidence: medium): CTI notes many hacktivist campaigns involve DDoS and website defacements; defacement is a plausible companion tactic but not uniquely evidenced for this actor in the reviewed sources. · ref
Strategic Intelligence
Limited preview
Last updated: 2026-02-20T04:14:51+00:00

Gaza Children's Hacker Group — Hacktivist / Pro‑Palestinian Telegram‑centric Collective

Classification: TLP:WHITE — Open Source Intelligence (OSINT)

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for Decision Makers — Gaza Children's Hacker Group

Classification: TLP:WHITE — OSINT

Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — Gaza Children's Hacker Group


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-02-20T04:17:52+00:00

IOC Appendix (TLP:WHITE) — Gaza Children's Hacker Group

Note: This appendix is OSINT-derived. Items are primarily public communication surfaces and should be used for monitoring and correlation, not indiscriminate blocking. Dates are “first observed in OSINT” where available.

More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-02-20T04:18:06+00:00

OSINT Library — Gaza Children's Hacker Group


2024-08-05 — CYFIRMA Research — “Hamas Leadership Assassination Explainer (includes Gaza Children’s Group leak mention)”

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/5
Address Verification SOCMINT
t.me/Gaz****************** Restricted Not integrated
t.me/gaz************* Restricted Not integrated
t.me/+MQ************** Restricted Not integrated
t.me/Gaz********** Restricted Not integrated
t.me/Gaz************************ Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
Showing 1–4 of 4 images
Statement Free Preview
Statement
Hacked website Free Preview
Hacked website
Propaganda Free Preview
Propaganda
Image used in social media account Free Preview
Image used in social media account