Categories: Cyber warfareHacking

The Syrian Electronic Army is causing a mass media outage through Gigya hacking

High profile global websites using the customer management platform Gigya suffered a traffic redirection attack operated by the Syrian Electronic Army.

A significant number of popular websites belonging to media organizations appeared to has been hacked by the hacking collective of Syrian Electronic Army on Thursday.

Syrian Electronic Army gigya hacked by SEASyrian Electronic Army gigya hacked by SEA

The apparently hacked website, including The Independent, Telegraph e The Chicago Tribune, CNBC and other popular media agency like the Italian La Repubblica, display the following message

 “You’ve been hacked by the Syrian Electronic Army (SEA)”. 

syrian electronic army notificationsyrian electronic army notification

According to the screenshots posted via Twitter by SEA also Dell, Microsoft, Ferrari and Unicef were hit by the hackers. Experts have immediately thought to an hack of customer management platform Gigya, which is used by hundreds of leading brands.

In an email from Gigya, visioned by journalists at CNBC, the company confirmed that it is under attack, apparently calls to Gigya domains were redirected to websites controlled by attackers and used to spread the messages. Fortunately the SEA haven’t used the traffic redirection to serve malware on final users, instead it has only spread propaganda messages.

The hackers of SEA team have chosen this date because it is Thanksgiving in the U.S. and probably the majority of Americans are browsing news websites in their spare time.

The Syrian Electronic Army supports the Syrian President Bashar al-Assad, in the last years the group hacked several important companies and media agencies, including the BBC, the Associated PressThe Financial TimesThe New Your Time and the Guardian, Microsoft and Twitter.

The group is politically motivated and many security experts consider its campaigns as part of PSYOPs campaign directed by the Syrian Regime.  The Syrian Electronic Army first emerged in May 2011, during the first Syrian uprisings, when it conducted various attacks against social media for pro-Assad propaganda.

Stay tuned for more information …

Pierluigi Paganini

(Security Affairs –  SEA, Gigya)

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

A cyberattack was responsible for the week-long outage affecting Cellcom wireless network

Cellcom, a regional wireless carrier based in Wisconsin (US), announced that a cyberattack is the…

50 minutes ago

Coinbase data breach impacted 69,461 individuals

Cryptocurrency exchange Coinbase announced that the recent data breach exposed data belonging to 69,461 individuals.…

8 hours ago

U.S. CISA adds Ivanti EPMM, MDaemon Email Server, Srimax Output Messenger, Zimbra Collaboration, and ZKTeco BioTime flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti EPMM, MDaemon Email Server, Srimax Output…

12 hours ago

A critical flaw in OpenPGP.js lets attackers spoof message signatures

A critical flaw in OpenPGP.js, tracked as CVE-2025-47934, lets attackers spoof message signatures; updates have…

13 hours ago

SK Telecom revealed that malware breach began in 2022

South Korean mobile network operator SK Telecom revealed that the security breach disclosed in April…

16 hours ago

4G Calling (VoLTE) flaw allowed to locate any O2 customer with a phone call

A flaw in O2 4G Calling (VoLTE) leaked user location data via network responses due…

1 day ago