Çağrı Cihazı Saldırıları Sonrası Siber Tehdit İstihbaratı için Yeni Bir Perspektif ve Model Önerisi
A New Perspective and Model Proposal for Cyber Threat Intelligence after Pager Attacks

Summary/Abstract: This study explores the September 2024 pager attacks on Hezbollah as a case study to propose an expanded model for Cyber Threat Intelligence (CTI) within the framework of hybrid warfare. Attributed to a highly coordinated Israeli operation, the attack involved not only cyber elements but also Electronic Warfare (EW), Signals Intelligence (SIGINT), and manipulated supply chains. The incident marked by the synchronized detonation of thousands of pagers and radios exemplifies the integration of kinetic and cyber capabilities, challenging conventional threat intelligence models. The research critiques the current limitations of the MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) framework, especially its inability to adequately capture Radio Frequency (RF)-based and analog-targeted attacks. In response, it proposes two new techniques: “Spectrum-Based Signal Injection” and “RF Message Injection & Manipulation”, aiming to better represent EW and SIGINT-driven threats. Mitigation strategies include RF anomaly detection, secure communication protocols, and integrated SIGINT incident response. The study investigates the strategic use of low-tech device vulnerabilities and supply chain compromises in modern conflicts, highlighting the blurred boundaries between physical and digital warfare. Integrating RF variable vectors into CTI frameworks, the proposed model may offer a more comprehensive approach to detect and prevent hybrid threats, reshaping threat intelligence and defense policy in the digital age.

• Details
• Contents