ETDA ThaiCERT
Report
Search
Home > List all groups > Cyber Caliphate Army (CCA), United Cyber Caliphate (UCC)

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link APT group: Cyber Caliphate Army (CCA), United Cyber Caliphate (UCC)

NamesCyber Caliphate Army (CCA) (self given)
United Cyber Caliphate (UCC) (self given)
Islamic State Hacking Division (self given)
ATK 133 (Thales)
TAG-CT6 (?)
Country[ISIS]
MotivationSabotage and destruction
First seen2014
Description(Wikipedia) Islamic State Hacking Division or United Cyber Caliphate refers to any number of group self-identifying as the digital army for Islamic State of Iraq and Levant. The cyber security group had pledged allegiance to Jeremy An and his objectives in late 2014. Their recent claims and hacks have led FBI director James Comey to state that his agency does not yet have the capabilities to limit ISIL attempts to recruit Americans through social media. Russian military hackers have been identified as using the CyberCaliphate nomer to cover several hacking attacks, notably on TV5Monde and the Twitter of US CENTCOM.

A list of names and details said to be of American military personnel was released by unknown parties who said they were part of the ISHD, but doubts were raised on the source and nature of the data.
ObservedSectors: Defense, Government.
Countries: Australia, Canada, UK, USA.
Tools used
Operations performedFeb 2015U.S. military wives’ death threats
Five military wives received death threats from a hacker group calling itself “CyberCaliphate”, claiming to be an Islamic State affiliate, on February 10, 2015. This was later discovered to have been a false flag attack by Sofacy, APT 28, Fancy Bear, Sednit, when the victims’ email addresses were found to have been in the Fancy Bear phishing target list.
<https://www.apnews.com/4d174e45ef5843a0ba82e804f080988f>
Apr 2015Tasmania's Hobart International Airport website has been shut down after it was hacked and defaced with a statement supporting the radical Islamist group
<https://www.telegraph.co.uk/news/worldnews/islamic-state/11531794/Australian-airport-website-hacked-by-Islamic-State.html>
Apr 2015Compromise of TV5Monde in France
“A group calling itself the Cyber Caliphate, linked to so-called Islamic State, first claimed responsibility. But an investigation now suggests the attack was in fact carried out by a group of Russian hackers. (Sofacy, APT 28, Fancy Bear, Sednit, ed.)”
<https://www.bbc.com/news/technology-37590375>
Jun 2015ISIS 'kill list' includes names of 151 Canadians
<https://www.cbc.ca/news/canada/isis-kill-list-canadians-1.3637214>
Aug 2015Isis 'hacking division' releases details of 1,400 Americans and urges attacks
<https://www.theguardian.com/world/2015/aug/13/isis-hacking-division-releases-details-of-1400-americans-and-urges-attacks>
Sep 2015ISIS hackers intercept top secret British Government emails in major security breach uncovered by GCHQ
<https://www.mirror.co.uk/news/uk-news/isis-hackers-intercept-top-secret-6428423>
Apr 2017ISIS-linked Cyber Group Releases 'Kill List' of 8,786 US Targets For Lone Wolf Attacks
<https://www.newsweek.com/isis-linked-cyber-group-releases-kill-list-8786-us-targets-lone-wolf-attacks-578765>
Information<https://en.wikipedia.org/wiki/Islamic_State_Hacking_Division>

Last change to this card: 20 April 2020

Download this actor card in PDF or JSON format

Previous: Cyber Berkut
Next: Dark Caracal

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key