Skip to content
UnclassifiedIdeologyIntermediate sophistication

Cyber Caliphate

Cyber Caliphate is a threat actor group with an ideological motive, tracked by Brandefense. It targets the Media and Entertainment sector in the United States and France. It uses 7 MITRE ATT&CK techniques.

Techniques
7
Exploited CVEs
No CVE data
First seen
May 5, 2015
Last seen
May 5, 2015
Record updated

Who They Target.

How They Operate · MITRE ATT&CK.

7 techniques across 5 of 14 tactics

Reconnaissance2

T1071.001
Application Layer Protocol: Web Protocols
T1082
System Information Discovery

Resource Development·

Initial Access·

Execution1

T1059.005
Command and Scripting Interpreter: Visual Basic

Persistence1

T1547.001
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Privilege Escalation·

Defense Evasion1

T1497.001
Virtualization/Sandbox Evasion: System Checks

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact2

T1489
Service Stop
T1491.002
Defacement: External Defacement

Arsenal · Malware And Tools.

  • Njwormmalware

Indicators Of Compromise.

TLP:AMBER

1 indicator on the Brandefense platform

IP, domain and hash indicators · YARA rules · ATT&CK Navigator export

Request A Demo

About Cyber Caliphate.

An Islamic fundamentalist threat group claiming ties to the Islamic State of Iraq and Syria (ISIS), responsible for disruptive attacks against media and military social media accounts.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.