New research reveals hackers carried out over 237 cyber operations against space infrastructure from 2023 to 2025.
Experts warn cyberwarfare increasingly threatens satellites and communication systems, particularly during the Gaza conflict.
The Center for Security Studies (CSS) at ETH Zürich compiled social media posts, news reports, and forum data documenting attacks on Israeli and global space agencies.
Hackers launched their largest wave in June 2025, when Israel and Iran faced 72 cyberattacks in just one month.
Clémence Poirier, the report’s author, noted this spike accounts for nearly one-third of all incidents recorded during the study period.
The study states cyber operations against space assets now reflect broader wartime patterns, similar to attacks during Russia’s invasion of Ukraine.
Researchers identified almost all threat actors as pro-Palestinian groups, except for one.
The report highlights that Hamas does not possess satellites or space systems over Gaza, and pro-Israeli actors may have acted covertly.
Patterns and Methods of Attacks
Hackers carried out ten attacks in October 2023 after Hamas’s armed incursion on October 7.
They targeted organizations including the Israel Space Agency (ISA) and defence company Rafael.
Researchers noted the escalation surprised global hacktivists, who took time to coordinate and identify targets.
Hacktivists struck 77 space-related companies and organizations during the Gaza conflict.
They focused on Rafael, Elbit Systems, and the ISA, while also targeting international bodies like NASA.
The report shows attackers mostly targeted aerospace and defence companies for military manufacturing, not space activities.
Over 70% of attacks used denial-of-service (DDoS) methods, overwhelming networks until systems crashed.
The study states hackers favored DDoS because these attacks require little technical skill, happen quickly, and distract from more advanced operations.
Other attacks included data leaks, intrusions, and unauthorized information access.
Some leaks or data sales coincided with key conflict events, though researchers caution that timing might be fabricated or unverifiable.
CSS researchers conclude the visible incidents likely represent only a portion of the total cyber activity against space systems.
Emerging Trends in Space Conflict
The study identifies the largest activity surge during a 12-day Israel-Iran confrontation in June 2025, producing 72 attacks.
Pro-Palestinian and pro-Iranian groups simultaneously targeted Israeli space infrastructure.
Researchers note both conflicts influenced each other politically, militarily, and rhetorically, and actors often operated across both arenas.
Hacktivist groups replicated techniques from prior conflicts, applying them to the Gaza situation.
For example, a 2023 DDoS attack by the Cyber Army of Palestine used code similar to the IT Army of Ukraine’s tools.
Most attacks caused limited operational or physical damage, but analysts say the trends indicate the future of space-focused cyber conflict.
The study highlights that cyber operations now consistently affect the space sector, driven by hacktivists’ continued interest in targeting industry actors.
Researchers urge governments and companies to develop space-focused cybersecurity strategies to defend critical infrastructure from future threats.
