New research reports more than 237 cyber operations that targeted space infrastructure from 2023 to 2025.Analysts document how cyber warfare increasingly threatens space satellites and communications systems.The report identifies 237 operations against the space sector between January 2023 and July 2025 during the Gaza conflict.Researchers at the Center for Security Studies at ETH Zürich gathered information from social media, news reports, and cybercrime forums.They compiled material about cyberattacks on Israeli space assets and international agencies.The most dramatic surge in space-related cyberattacks appeared during the Israel–Iran clashes in June 2025.Researchers recorded 72 operations in that single month.This total represents nearly one-third of all incidents noted during the study period.Clémence Poirier, the author, highlighted this intense escalation.The report states that cyber operations now form a broad trend during armed conflicts.It compares these patterns to activity seen during Russia’s renewed invasion of Ukraine.Investigators found that all but one identified threat actor supported Palestinian causes.The study also notes that Hamas lacks satellites or any space systems over the Gaza Strip.Researchers believe pro-Israeli groups may have conducted undisclosed operations.
Methods Hackers Used Against Space Targets
Ten operations struck in October after Hamas launched its attack on October 7, 2023.
These incidents targeted groups like the Israel Space Agency and defence firm Rafael.
The report explains that the escalation surprised hacktivists worldwide.
It states that attackers needed time to organize and select targets.
Hacktivists ultimately struck 77 different space organisations or companies during the Gaza conflict.
Rafael, Elbit Systems, and the ISA received the most hostile activity.
International bodies such as NASA also faced attacks.
The report states that most attackers targeted aerospace and defence firms for their military production roles.
These firms drew attention despite limited direct involvement in space operations.
More than 70 percent of the space-related cyberattacks used denial-of-service methods.
These DDoS operations flooded systems until networks failed for users.
Attackers favored DDoS because these methods require little expertise.
They also deploy them quickly and sometimes use them to distract from deeper intrusions.
Other operations involved data leaks, system intrusions, and breaches.
Some threat actors timed leaks or sales to major conflict events.
Researchers admit difficulty verifying these timings and note possible fabrication.
The study concludes that open-source findings likely underrepresent the real scale of activity.
Persistent Digital Conflict in Orbital Domains
The strongest spike in attacks occurred during the 12-day exchange between Israel and Iran in June 2025.
During that period, attackers launched 72 cyber operations against the space sector.
Pro-Palestinian groups and pro-Iranian groups targeted Israel simultaneously.
The report states that both wars influenced each other politically and militarily.
Threat actors active in one arena also engaged in operations linked to the other.
Hacktivists reused tactics from previous conflicts and modified them for Gaza.
One 2023 DDoS attack by the “Cyber Army of Palestine” against the ISA used code seen in Ukraine.
The IT Army of Ukraine had deployed similar code during its operations against Russia.
Most incidents caused limited physical or operational harm.
However, researchers argue that the pattern signals the future of space-based cyber conflict.
The study concludes that cyber operations now appear as consistent features in modern warfare.
Hacktivists show increased interest in targeting space-related actors.
The report urges the development of strong space-focused cyber strategies.
Researchers argue that such measures must protect vital orbital infrastructure from further attacks.
