eFinder

eFinder

Home › Corporate Vulnerability › Article

Pro-Iran hacking group targets California tech company in flurry of attacks

Nypost · · 420 words · By Pierce Sharpe
Corporate Vulnerability Geopolitical Conflict (Iran-US) Cybersecurity Threats
open_in_new Read the original article: https://nypost.com/2026/05/12/business/ebay-targeted-by-pro-iran-hacking-group/

psychologyDetected Techniques

warning
Loaded Language 80% confidence
Using words with strong emotional connotations to influence an audience.

fact_checkFact-Check Results

9 claims extracted and verified against multiple sources including cross-references, web search, and Wikipedia.

info Single Source 5
check_circle Corroborated 3
help Insufficient Evidence 1
info
“San Jose-based eBay was hammered by a massive cyberattack allegedly carried out by a pro-Iran hacking group”
SINGLE SOURCE
The New York Post reports that eBay was hammered by a massive cyberattack allegedly carried out by a pro-Iran hacking group. No other independent news sources in the provided evidence corroborate this specific event.
travel_explore
web search NEUTRAL — The Handala Hack Team is a hacktivist group supposedly operating from Iran that runs cyberattacks against U.S. and Israeli organizations. It has released personal documents and emails from thousands o…
https://en.wikipedia.org/wiki/Handala_Hack_Team
travel_explore
web search NEUTRAL — San Jose-based eBay was hammered by a massive cyberattack allegedly carried out by a pro-Iran hacking group that's now threatening some of world's biggest tech companies.
https://nypost.com/2026/05/12/business/ebay-targeted-by-pro-…
travel_explore
web search NEUTRAL — Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. We include recommendations for defenders.
https://unit42.paloaltonetworks.com/iranian-cyberattacks-202…
check_circle
“The shadowy “Islamic Cyber Resistance in Iraq – 313 Team” claimed responsibility for the assault on eBay”
CORROBORATED
Multiple sources identify the 'Islamic Cyber Resistance in Iraq – 313 Team' as a group claiming responsibility for attacks, including the eBay attack mentioned in the New York Post and the Spotify attack mentioned in Threat Beat.
menu_book
wikipedia NEUTRAL — Iran, officially the Islamic Republic of Iran, also known as Persia, is a country in West Asia. It borders Iraq to the west, Turkey, Azerbaijan, and Armenia to the northwest, the Caspian Sea to the no…
https://en.wikipedia.org/wiki/Iran
menu_book
wikipedia NEUTRAL — The People's Mojahedin Organization of Iran (PMOI), also known as Mojahedin-e-Khalq (MEK) or Mojahedin-e-Khalq Organization (MKO; Persian: سازمان مجاهدین خلق ایران, romanized: Sâzmân-e Mojâhedin-e Kha…
https://en.wikipedia.org/wiki/People's_Mojahedin_Organizatio…
menu_book
wikipedia NEUTRAL — The Quds Force (Persian: نیروی قدس, romanized: niru-ye qods, lit. 'Jerusalem Force') is one of five branches of Iran's Islamic Revolutionary Guard Corps (IRGC). It specializes in unconventional warfar…
https://en.wikipedia.org/wiki/Quds_Force
+ 3 more evidence sources
info
“which reportedly triggered widespread outages and left users unable to browse listings, make purchases or complete transactions for nearly two days last month”
SINGLE SOURCE
The New York Post reports that widespread outages left users unable to browse listings. No other independent sources confirm the duration (nearly two days) or the specific impact on transactions.
travel_explore
web search NEUTRAL — The widespread outages left users unable to browse listings. Getty Images. The group bragged online that it used “rapid fire” attacks designed to keep eBay’s infrastructure under constant strain, whil…
https://nypost.com/2026/05/12/business/ebay-targeted-by-pro-…
travel_explore
web search NEUTRAL — Downdetector shows live status updates and outages people are experiencing.Downdetector shows each service in one of three statuses. The status depends on how many user reports we receive compared to …
https://downdetector.com/
travel_explore
web search NEUTRAL — Buy & sell electronics, cars, clothes, collectibles & more on eBay, the world's online marketplace. Top brands, low prices & free shipping on many items.
https://www.ebay.com/
info
“Cybersecurity analysts said the attack bore the hallmarks of a Distributed Denial of Service, or DDoS, assault”
SINGLE SOURCE
While the New York Post mentions 'rapid fire' attacks (characteristic of DDoS) and other sources discuss DDoS attacks by the 313 Team generally, there is no specific corroboration from multiple independent cybersecurity analysts regarding the eBay attack specifically being a DDoS.
menu_book
wikipedia NEUTRAL — In computing, a denial-of-service attack (DoS attack doss) is a cyberattack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or in…
https://en.wikipedia.org/wiki/Denial-of-service_attack
menu_book
wikipedia NEUTRAL — Distributed Denial of Secrets, abbreviated DDoSecrets, is a nonprofit whistleblower site founded in 2018 for news leaks. The site is a frequent source for other news outlets and has worked on investig…
https://en.wikipedia.org/wiki/Distributed_Denial_of_Secrets
menu_book
wikipedia NEUTRAL — This is a list of cybersecurity information technologies. Cybersecurity concerns all technologies that store, manipulate, or move computer data, such as computers, data networks, and all devices conne…
https://en.wikipedia.org/wiki/List_of_cybersecurity_informat…
+ 3 more evidence sources
info
“The attack reportedly cost the online marketplace as much as $200 million per day in disrupted transactions”
SINGLE SOURCE
The $200 million per day figure is reported exclusively by the New York Post in the provided evidence.
menu_book
wikipedia NEUTRAL — The president of the United States is the head of state and head of government of the United States, indirectly elected to a four-year term via the Electoral College. Under the U.S. Constitution, the …
https://en.wikipedia.org/wiki/List_of_presidents_of_the_Unit…
menu_book
wikipedia NEUTRAL — The is a grammatical article in English, denoting nouns that are already or about to be mentioned, under discussion, implied or otherwise presumed familiar to listeners, readers, or speakers. It is th…
https://en.wikipedia.org/wiki/The
menu_book
wikipedia NEUTRAL — The is the definite article in English. The, or THE, may also refer to:
https://en.wikipedia.org/wiki/The_(disambiguation)
+ 3 more evidence sources
check_circle
“The same crew later claimed responsibility for an attack on Spotify that sparked thousands of outage complaints from furious users”
CORROBORATED
Threat Beat explicitly states that the 'Islamic Cyber Resistance in Iraq – 313 Team' announced on Telegram that they carried out a massive cyber attack targeting Spotify. Other sources (SQ Magazine, Banking Dive) confirm the group's existence and pattern of claiming attacks.
menu_book
wikipedia NEUTRAL — Iran, officially the Islamic Republic of Iran, also known as Persia, is a country in West Asia. It borders Iraq to the west, Turkey, Azerbaijan, and Armenia to the northwest, the Caspian Sea to the no…
https://en.wikipedia.org/wiki/Iran
menu_book
wikipedia NEUTRAL — The Paveh (Persian:پاوه) is an Iranian long-range surface-to-surface cruise missile and has a range of 1,650 km (1,030 mi).
https://en.wikipedia.org/wiki/Paveh_cruise_missile
menu_book
wikipedia NEUTRAL — The People's Mojahedin Organization of Iran (PMOI), also known as Mojahedin-e-Khalq (MEK) or Mojahedin-e-Khalq Organization (MKO; Persian: سازمان مجاهدین خلق ایران, romanized: Sâzmân-e Mojâhedin-e Kha…
https://en.wikipedia.org/wiki/People's_Mojahedin_Organizatio…
+ 3 more evidence sources
check_circle
“Spotify acknowledged widespread problems with its app and web player while saying it was investigating the disruption”
CORROBORATED
Multiple sources (Google News, FINCHANNEL) confirm that Spotify acknowledged service issues and stated they were checking them out/investigating.
travel_explore
web search NEUTRAL — Spotify App Goes Down Amid Major Global Outage with Over 30,000 Users Reporting Disruption.Spotify issues affect thousands globally, app down with playback problems. 39 minutes ago.
https://news.google.com/stories/CAAqNggKIjBDQklTSGpvSmMzUnZj…
travel_explore
web search NEUTRAL — The issues, which impacted the app, web player, and streaming services, were resolved within a few hours. Spotify confirmed that the outage was not caused by a security breach and assured users that i…
https://www.tiktok.com/en/trending/detail/spotify-issue-apri…
travel_explore
web search NEUTRAL — Spotify acknowledged the problems via an X post, stating, “We’re aware of some issues right now and are checking them out!” (SpotifyStatus), but the exact cause remains unclear, with speculation point…
https://finchannel.com/spotify-outage-is-estimated-to-be-app…
info
“The hacking group has also claimed attempted attacks on WordPress and Goodreads”
SINGLE SOURCE
The provided evidence mentions the 313 Team claiming attacks on Bluesky and Canonical (Ubuntu), but there is no mention of WordPress or Goodreads in the search results.
travel_explore
web search NEUTRAL — The group "Islamic Cyber Resistance in Iraq – 313 Team" claims on Telegram to have carried out the attacks on Bluesky.
https://www.heise.de/en/news/Bluesky-outage-DDoS-attack-alle…
travel_explore
web search NEUTRAL — 313 Team's DDoS attack knocked Ubuntu's security API offline on April 30, 2026, paired with an extortion demand.A hacktivist group calling itself “The Islamic Cyber Resistance in Iraq 313 Team” claime…
https://sqmagazine.co.uk/313-team-claims-ddos-extortion-atta…
travel_explore
web search NEUTRAL — The hacktivist group The Islamic Cyber Resistance in Iraq, aka 313 Team claimed responsibility for the 503 errors Ubuntu's website was returning on Thursday evening, announcing via its Telegram channe…
https://www.theregister.com/security/2026/05/01/pro-iran-gro…
help
“previously taking credit for disruptions targeting Microsoft, Amazon, Dropbox and X”
INSUFFICIENT EVIDENCE
No evidence was found in the provided search results to support claims of attacks on Microsoft, Amazon, Dropbox, or X by this group.
info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.