Edward Kiledjian

Hezbollah's Cyber Unit Development

Hezbollah has advanced its cyber capabilities significantly, with substantial support from Iran. The group established its own cyber unit, focusing on intelligence gathering and cyber defence. The Islamic Revolutionary Guard Corps (IRGC) has played a direct role in developing this unit, which is reportedly based in Beirut’s southern neighbourhood of Dahieh. However, the precise details of the unit’s operations and exact location remain uncertain due to limited verification.

Cyber Attack Capabilities

Hezbollah has demonstrated the ability to execute sophisticated cyber attacks. For instance, during the 2006 Israel-Hezbollah War, the group targeted websites in several countries that supported Israel, including some in the United States. An associated cyber unit, known as Lebanese Cedar APT, has carried out extended attacks on telecommunications and internet providers across various nations, including the US, UK, and Israel. These attacks leverage advanced cyber tactics to further Hezbollah's strategic objectives, though the full extent and details of these operations are not always fully verified.

Tactics and Tools

Hezbollah employs custom remote access tools (RATs) to evade detection and maintain access to compromised systems. The group also engages in psychological operations and disinformation campaigns through online platforms to support its broader goals. While these tactics are documented, their overall effectiveness and the scope of their application remain somewhat uncertain.

Training and Recruitment

During the Covid-19 pandemic, Hezbollah expanded its cyber education efforts to include foreign recruits, focusing on information warfare. The group has trained young Arabs in spreading propaganda and disinformation online, which aids in advancing Iran’s strategic interests and generating funds. However, the full impact and extent of these training programs are not entirely clear, as detailed evidence is limited.

Strategic Importance

Hezbollah’s cyber capabilities act as an extension of Iran’s broader cyber programme, providing Tehran with plausible deniability in certain operations. In 2010, the Obama administration described Hezbollah as "the most technically capable terrorist group in the world," reflecting its advanced capabilities at that time. While Hezbollah’s cyber capabilities are significant, they are generally considered less advanced compared to major state actors. Continued support from Iran is expected to further enhance these capabilities, although precise projections about future advancements remain uncertain.

Recent Claims

Recent claims regarding exploding pagers and large-scale attacks on Hezbollah members lack credible sources and should be approached with caution. It is crucial to verify such information through multiple reliable sources before drawing conclusions about current events or the cyber capabilities of any group.