HOMETHREATSWeRedEvils
APT / THREAT GROUP

WeRedEvils

🇮🇱Israel-attributed
1
campaigns
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

WeRedEvils is a hacking group that has claimed responsibility for multiple cyber attacks. They targeted the Iranian Electric Grid and the Tasnimnews website, causing the latter to go offline. The group also claimed to have hacked into Iran's oil infrastructure, causing significant damage. They emerged in response to the Hamas massacre and are believed to be a group of Israeli cyber experts.

Threat Analysis

WeRedEvils is a known-sophistication threat actor attributed to Israel, engaged in cyber operations with a primary motivation of unknown activity patterns.

Known Campaigns

WeRedEvils — Active Operations March 2026

WeRedEvils is a unknown-motivation threat actor attributed to IL. WeRedEvils is a hacking group that has claimed responsibility for multiple cyber attacks. They targeted the Iranian Electric Grid and the Tasnimnews website, causing the latter to go offline. The group also claimed to have hacked into Iran's oil infrastructure, causing significan...

ACTIVEMEDIUM2026

External References

Quick Facts

TypeAPT / Threat Group
Origin🇮🇱 Israel
Aliases1
SourceMalpedia

Also Known As

WeRedEvils

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
WeRedEvils — APT / Threat Group | Threat Intelligence | CTIWATCH.COM