← Back to all threat actors

WIRTE

Also known as Ashen Lepus
Tracked as G0090

WIRTE is a cyberespionage actor, believed to be a subgroup of the Hamas-affiliated Gaza Cybergang, that has been active since at least August 2018. WIRTE has targeted diplomatic, financial, military, legal, and technology organizations across the Middle East, North Africa, and in Europe to gather intelligence. WIRTE has remained persistently active despite the ongoing Israel-Hamas conflict and has expanded their operations to include wiper malware attacks against Israeli targets.

How we source and review actor profiles
Motivation
cybercrime
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Cataloged
IdentityAlias: Ashen Lepus

Reviewed identity mapping approved on this date.

Cataloged
IdentityTracking identifier: G0090

Reviewed identity mapping approved on this date.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

WIRTECanonical Name
Ashen LepusAlias
G0090Tracking Id

Loading CVEs, techniques, indicators, malware, victims, and activity...