Infographic: Global Hacktivist Threats

Hacktivist groups continue to pose significant threats to governments, businesses, and critical infrastructure worldwide. This report presents selected insights from Graphika’s ATLAS intelligence reporting on hacktivist actors and adjacent communities, covering activities from February and March 2025.

Key Findings

• Dark Storm Team, a self-described pro-Palestine and anti-NATO hacktivist group, claimed responsibility for a global social media platform outage on March 10. The group frequently conducts distributed denial of service (DDoS) attacks on infrastructure in Israel and allied nations and collaborates with pro-Russia hacktivist groups targeting Western countries.
• Financial incentives are increasingly driving hacktivist activities. Dark Storm Team monetizes cyberattacks by offering DDoS-for-hire services and leveraging mainstream media attention to promote its cryptocurrency, DARKSTORM Solana.
• The group has a history of overstating attack impact, as seen in its unverified claims regarding the X outage and misleading characterizations of attacks on airports and the U.S. healthcare system.
• Hacktivist groups will almost certainly continue targeting high-profile commercial and government entities to amplify their political agendas and, in some cases, generate financial profit through hacking services, cryptocurrency sales, and donations.

Why This Matters

The evolving tactics of hacktivist groups highlight the intersection of geopolitical influence, cybercrime, and financial exploitation. Organizations across sectors—especially those in finance, healthcare, and government—must remain vigilant against these emerging threats. Understanding hacktivist motivations and strategies is essential for strengthening cyber defenses, mitigating risk, and protecting critical infrastructure.

If you'd like to learn more about how Graphika’s platform keeps you ahead of emerging threats, schedule a custom demo with an expert from our team.