Considering the hacker's motive: <a href="https://x.com/Sn_darkmeta/status/1844358501952618976" rel="nofollow">https://x.com/Sn_darkmeta/status/1844358501952618976</a><p>Is it safe to assume the hacker want to erase the evidence?<p>Forcing the service offline also means they want to prevent people from archiving evidence in the next how-ever-long hours. Combining with the spoken language they used in that video, are they planning some online disinformation campaign?<p>----<p>Edit: some more info about this group: <a href="https://old.reddit.com/r/technology/comments/1g0kupb/hacktivists_claim_responsibility_for_taking_down/lr9kbmo/" rel="nofollow">https://old.reddit.com/r/technology/comments/1g0kupb/hacktiv...</a><p>----<p>This group claims to be pro palestinian and it's entirely based on Russia.<p>[<a href="https://therecord.media/middle-east-financial-institution-6-day-ddos-attack](https://therecord.media/middle-east-financial-institution-6-day-ddos-attack)" rel="nofollow">https://therecord.media/middle-east-financial-institution-6-...</a><p>>SN\_BLACKMETA has operated its Telegram channel since November 2023, boasting of DDoS incidents and cyberattacks on infrastructure in Israel, the Palestinian Territories and elsewhere. While all of the group’s messages focus on the Palestinian Territories and perceived opponents to Palestine, many of its posts are written in Russian.<p>>The group’s account on X also shows that it was created by someone in Staraya, a town in Novgorod Oblast, Russia. The account’s initial language was also set to Russian.<p>>The researchers added that analysis of timestamps and activity patterns showed possible evidence that the actors within the group are operating in a timezone “close to Moscow Standard Time (MSK, UTC+3) or other Middle Eastern or Eastern European time zones (UTC+2 to UTC+4).”<p>~~Attacks include pro palestine sites and groups, so~~ take that "pro palestine" with a grain of salt.<p>EDIT: edited for clarity on what is actually in the article and not in outside anonymous sources. If you want to read more, [there's a clearer report on one of their attacks and their usual targets.](<a href="https://www.radware.com/security/threat-advisories-and-attack-reports/six-day-web-ddos-attack-campaign/" rel="nofollow">https://www.radware.com/security/threat-advisories-and-attac...</a>)