Unknowns Cyber ​​Team

Unknowns Cyber Team is a hacktivist collective that became particularly visible during the 2025 Israel–Iran confrontation. Independent threat reporting places it among the most active groups associated with DDoS campaigns during the conflict.

Positive Technologies, citing NSFOCUS and analysis of dark-web/Telegram activity, reported Unknowns Cyber Team as responsible for a large share of hacktivist activity targeting Iran in June 2025 and linked the group to nearly all DDoS attacks on Iranian media in that period. Hackmanac separately recorded claims against Iran Transition Council, Woman Life Freedom TV and Simay Azadi TV.

At the same time, Radware tracked Unknowns Cyber Team among groups attacking Israeli resources during the same broader conflict and reproduced Telegram screenshots showing an announced attack on Israel. Guardz likewise included the group in hacktivist activity affecting the United States and described these groups as previously active against Israeli and European systems. This creates a material attribution inconsistency.

INFERENCE (confidence: medium): the contradictory direction of public reporting may reflect identity reuse, coalition participation, rapidly changing alignment, tracker conflation or a genuinely opportunistic brand whose targeting is not reducible to a single national allegiance. The current evidence does not justify labeling the actor as definitively Iranian or pro-Iran solely from language, flags or channel content.