Operation Ababil


Operation Ababil was a series of cyber attacks starting in 2012, targeting various American financial institutions and carried out by a group calling itself the "Cyber fighters of Izz Ad-Din Al Qassam".

Details

The cyber attacks, or more specifically denial of service attacks, were launched by the Cyber fighters of Izz Ad-Din Al Qassam also known as Qassam Cyber Fighters. The group announced the attacks on September 18, 2012 on Pastebin where they criticized Israel and the United States and justified the attacks as a response to the Innocence of Muslims video released by controversial American pastor Terry Jones. Their targets included the New York Stock Exchange as well as a number of banks including J.P. Morgan Chase. The result of the attacks was a limited disruption of the targeted websites. The attacks ended on Oct 23, 2012 because of the Eid al-Adha holiday at which point they offered to speak to the media through e-mail.

Name of the group and operation

The group's moniker, Izz ad-Din al-Qassam, was a Muslim preacher who lead in the fight against British, French and Jewish nationalist organizations in the Levant in the 1920s and 1930s.

Disputed origins of attacks

On September 21, 2012, the Washington Post reported that the attacks originated not from a hacktivist group but from the government of Iran and cited U.S. Senator Joseph I. Lieberman as one who was a proponent of this idea. Lieberman told C-Span that he believed the Iranian government was sponsoring the group's attacks on US banks in retaliation for Western economic sanctions. An early report by Dancho Danchev found the amateurish "outdated and virtually irrelevant technical skills" of the attack suspicious. But Michael Smith, senior security evangelist at Akamai, found the size of the attacks—65 gigabits of traffic per second—more consistent with a state actor than with a typical hacktivist denial of service attack which would be less than 2 gigabits/second.
The controversial hacktivist, The Jester, claimed the Qassam Cyber Fighters had help with their attacks from the hacking group Anonymous.

Phase two

On December 10, 2012, the Qassam Cyber Fighters announced the launching of phase two of Operation Ababil. In that statement, they specifically named U.S. Bancorp, J.P. Morgan Chase, Bank of America, PNC Financial Services and SunTrust Bank as targets and identified events such as Hurricane Sandy and the 2012 US Presidential Election as reasons for the delay of phase two. This announcement also mentioned disrespect towards the Prophet Mohammed as motivation and denied the involvement of any nation state. It was during this time that media attention increased with one journalist observing, "Operation Ababil stands out for its sophistication and focus, experts say." and allegations of involvement by Iran also increased. On January 29, 2013, an announcement was made that phase two would come to a conclusion due to the removal of the main copy of the video from YouTube. The announcement also identified additional copies of the movie also hosted on YouTube.

Phase three

On February 12, 2013, the Qassam Cyber Fighters issued a warning that the other copies of the movie referenced in their January 29 posting should be removed. They followed this with a "serious warning" and then an "ultimatum" after the additional copies of the video were not removed. On March 5, 2013, they announced the beginning of Phase 3 of Operation Ababil on their Pastebin page. This was followed by several of the financial institutions on their target list reporting website disruptions.