22.03.2013 -president Obama first visit to Israel leads to an call to attack and take down Israelis sites ,mainly banks.
When investigating the Israel's bank attack:
The attackers communicates on twitter .
They publish links that instruct what site
to attack
They are using an DDOS attack which include
a special application for SYN FLOOD or ICMP FLOOD on port 80,443
So if you are working for an Israelis vendor ,you should be looking for large sync tcp packets or icmp packets traffic on port 80 or 443
I will
keep watching the osint chennels ....
here are some recent details :
Twitter communication and instructions
Site attacking instructions:
Online tool
Pcap finger print of the SYN PACKET