Researchers report more than 237 cyberattacks targeted space infrastructure from 2023 to 2025.
Cyber warfare now threatens satellites and communications systems, the study warns.
The Center for Security Studies (CSS) at ETH Zürich collected data from social media, news reports, and cybercrime forums.
They documented attacks on Israeli space systems and international agencies.
Attack frequency spiked during Israel-Iran tensions in June 2025, recording 72 operations in one month.
Report author Clémence Poirier says this spike represents nearly one-third of all attacks during the study period.
The report states cyberattacks against the space sector follow a broader wartime pattern, similar to Russia’s invasion of Ukraine.
Researchers identify almost all threat actors as pro-Palestinian, except one.
The study notes Hamas lacks satellites and space systems over Gaza, while pro-Israeli groups may act secretly.
Hacktivist Strategies and Target Selection
Hacktivists launched ten attacks in October after Hamas’s armed incursion on October 7, 2023.
These strikes hit the Israel Space Agency (ISA) and defence firm Rafael.
The report notes the escalation surprised hacktivists worldwide and slowed their target selection process.
Attackers targeted 77 space organisations, including Rafael, Elbit Systems, ISA, and NASA.
Researchers report most strikes hit aerospace and defence companies because of military manufacturing, not space activity.
Over 70 percent of attacks involved denial-of-service (DDoS) techniques, overwhelming systems until they failed.
DDoS attacks remain simple, fast, and often serve as distractions for deeper intrusions.
Hackers also executed data breaches, intrusions, and information leaks.
Some leaks or data sales coincided with key conflict events, though the study warns verification is difficult.
Researchers conclude open-source investigations reveal only part of the activity, suggesting the true scale remains much larger.
Emerging Patterns and Future Risks
The largest attack surge occurred during 12 days of Israel-Iran conflict in June 2025, producing 72 cyber operations.
Pro-Palestinian and pro-Iranian actors targeted Israel simultaneously.
The study notes both wars shaped each other politically, militarily, and rhetorically, with threat actors crossing arenas.
Hacktivists copied successful tactics from previous conflicts and applied them in Gaza.
A 2023 DDoS strike by the “Cyber Army of Palestine” used code similar to Ukraine’s IT Army attacks.
Most incidents caused limited operational damage, but the pattern signals future space-based cyber conflict.
The research concludes cyberattacks are becoming consistent elements of modern warfare, driven by hacktivist interest.
The study urges development of space-focused cyber strategies to defend vital space infrastructure from ongoing threats.
