ALTOUFAN TEAM Hits Middle East Targets

**Executive summary:** On 13–14 February 2023 the hacktivist group ALTOUFAN TEAM announced and carried out a campaign against Bahraini and Israeli websites involving defacements, DDoS attacks, and the use of stolen credentials (info-stealer logs) to access the Bahrain Social Insurance Organization employer portal and allegedly modify thousands of pension records; the report assesses the activity as low in technical sophistication (likely credential misuse rather than server compromise), lists affected sites, and provides mitigations for DDoS/defacement and credential-based intrusions.