A pro-Palestinian hacktivist group has issued an explicit call for coordinated cyberattacks timed to the Oct. 7 anniversary, raising concerns among cybersecurity experts about potential waves of disruptive digital assaults targeting websites and online infrastructure.
Sylhet Gang, which operates primarily through Telegram channels, posted a message on Oct. 1 declaring “7 October Soon / Timeout has started / We will be the first to attack IN SHA ALLAH,” according to a threat intelligence analysis from Radware Cybersecurity Advisory. The group’s explicit timing of the threat to coincide with the anniversary has heightened alert levels for organizations monitoring ideologically motivated cyber threats.
Security analysts warn that Oct. 7 anniversaries have emerged as focal points for pro-Palestinian hacktivist activity, with previous years witnessing coordinated campaigns involving distributed denial-of-service attacks, website defacements and data leak claims. These ideologically driven actors use the symbolic date to mount publicity-focused operations aimed at increasing visibility within media and hacktivist communities.
The primary concern surrounding Sylhet Gang stems not from the group’s technical sophistication but from its extensive network of allied hacktivist organizations. The collective operates within an ecosystem of partner channels that amplify messages across multiple languages and regions, creating what analysts describe as a “credible amplification pathway.”
Among Sylhet Gang’s documented collaborators are KaliHunt, AnonSec PS, DieNet and the pro-Russian group NoName057(16). The inclusion of NoName057(16) — which was also referenced in last year’s Oct. 7 framing — underscores the cross-ideological and global nature of the threat landscape.
“The scale of a potential disruptive event will depend less on Sylhet’s technical capability, but more the speed of cross-channel propagation and how many allied groups pick up the call,” the Radware advisory states.
Sylhet Gang publishes content in English, Russian and Arabic, repeatedly sharing links to external file hosts and attack-proof pages. This multilingual approach increases cross-regional reach and the likelihood that a single claim cascades across numerous communities.
Security experts highlight three primary concerns: the explicit anniversary timing that raises the likelihood of coordinated time-bound activity; the networked amplification system that allows claims to spread rapidly across multiple communities and languages; and the low barrier to entry for DDoS and web-layer attacks, which are inexpensive, scalable and difficult to prevent without proper mitigation solutions.
These types of attacks, while often causing temporary disruptions rather than permanent damage, can result in service outages, customer impact and negative media attention. Organizations are advised to anticipate temporal spikes in website defacement, data leak claims and DDoS attacks around the anniversary window.
The channel’s pattern of forwarding attack claims from partners and issuing calls to action suggests it plays both coordination and recruitment roles within the broader hacktivist ecosystem. Analysts warn that this dynamic can result in multiple attack waves and an overwhelming cascade of social media claims that could strain organizations’ security operations centers, incident response teams and communications resources.
