Dark Storm
Dark Storm is a threat actor group with an ideological motive, tracked by Brandefense. It targets 10 sectors, including Government and Technology, in 9 countries, including the United States and the United Kingdom.
- DarkStorm Team
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jul 31, 2023
- Last seen
- Jul 14, 2026
- Record updated
Who They Target.
About Dark Storm.
Dark Storm Team is a hacktivist and cybercriminal collective first observed in mid-to-late 2023. The group is primarily associated with pro-Palestinian and anti-Israel narratives, although parts of its activity have also aligned with pro-Russian and, more recently, pro-Iranian geopolitical interests. The group primarily conducts disruptive Distributed Denial-of-Service (DDoS) operations against public-facing websites and online services. Dark Storm Team frequently targets government and public administration entities, ministries of defence and foreign affairs, transportation and aviation services, airports, financial institutions, digital infrastructure providers, telecommunications companies, media organizations, technology platforms and other critical infrastructure operators. Dark Storm Team operates largely through Telegram and other social media platforms, which are used to announce operations, publish attack claims, recruit supporters, coordinate activity and advertise cybercriminal services. The group frequently publishes third-party availability-checking or “proof” links to support its attack claims.
Last updated Jul 17, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.