Moses Staff, an emerging threat group, has targeted several Israeli entities and compromised their networks, holding them for a significant non-negotiable ransom. First noted in late 2020, Moses Staff primarily targets high-value organizations in the Israeli region, often times compromising, encrypting, and releasing stolen information post-payment. The group demonstrates similar tactics, techniques, and procedures to that of “Black Shadow” and “Pay2Key” threat groups, while displaying their own unique traits such as openly admitting their cyberattacks are politically motivated. Specifically, Moses Staff is currently targeting entities of the Israeli Zionist regime and leaking the affected organizations’ data regardless of ransom payment. Currently, the group has listed sixteen (16) victims on their dark web forum with their most recent attack on Unit 8200. Additionally, the group was seen bragging on Twitter claiming to have “penetrate cyber infrastructure of the criminal Zionist government and found 22 terabyte 3D photos of all Israel areas taken by themselves.” CTAPT will continue to monitor the movements of the Moses Staff threat group and provide additional updates as deemed necessary.