Researchers documented over 237 cyber operations against space infrastructure from 2023 to 2025.
They warn that satellites and communications systems face growing cyberwarfare risks.
The Center for Security Studies (CSS) at ETH Zürich compiled data from social media, news reports, and cybercrime forums.
Analysts tracked attacks on Israel’s space sector and international agencies.
Hackers launched 72 cyber operations in June 2025 alone, targeting Israel and Iran, almost one-third of total attacks.
Report author Clémence Poirier says cyber operations against space now follow patterns seen in Ukraine’s recent conflict.
Researchers found nearly all attackers in the space sector identified as pro-Palestinian.
The study notes Hamas lacks space systems in Gaza, while pro-Israeli groups may have acted covertly.
Attack Methods and Targets
Hackers conducted ten attacks in October 2023 after Hamas’s armed incursion on October 7.
They struck the Israel Space Agency (ISA) and defence company Rafael.
The report notes global hacktivists struggled initially to organize and identify targets.
Hackers attacked 77 space-related organisations during the Gaza conflict.
Rafael, Elbit Systems, and the ISA faced the most attacks, while NASA and other international bodies were also targeted.
Researchers say attackers focused on aerospace and defence companies because of their military manufacturing roles.
Over 70 percent of attacks involved denial-of-service (DDoS) operations that flooded networks and crashed systems.
DDoS attacks required little skill, acted quickly, and distracted from more advanced intrusions.
Hackers also conducted data leaks, network intrusions, and information breaches.
Some leaks coincided with major conflict events, although researchers could not fully verify timing and warned of potential fabrication.
The study concludes that visible incidents likely understate the overall scale of space-sector cyber activity.
Patterns and Future Risks
The study shows Israel and Iran exchanged 72 cyber attacks over 12 days in June 2025.
Pro-Palestinian and pro-Iranian groups simultaneously targeted Israel during this period.
Researchers note both conflicts influenced each other politically, militarily, and rhetorically, with attackers crossing arenas.
Hackers replicated tactics from prior conflicts in the Gaza operations.
A 2023 DDoS by the “Cyber Army of Palestine” used code similar to Ukraine’s IT Army.
Most attacks caused limited physical or operational damage, yet the activity indicates future space-based cyber conflict.
The study finds cyber operations increasingly form consistent elements in modern warfare.
Hackers show growing interest in targeting space-industry actors.
Researchers recommend creating space-focused cybersecurity strategies to safeguard vital infrastructure from further attacks.
