Blackatom is a cyber espionage group, also identified by Google's Threat Analysis Group (TAG), and is assessed with high confidence to be a Palestine-based entity likely linked to Hamas. The group's primary motivation is to collect sensitive information and documents from high-value targets to gather intelligence, supporting military or Palestinian state objectives. What specifically sets Blackatom apart is its use of intricate and elaborate social engineering lures, specifically crafted for niche high-value targets, often involving highly focused phishing campaigns that target a very limited number of entities in each operation. Researchers have tracked the group, also known by the aliases Molerats and Proofpoint's TA402 designation, for over a decade. Historically, this group has also been referred to as Gaza Cybergang, Frankenstein, and WIRTE. It is important to note that Blackatom is distinct from APT28 and Fancy Bear, which are unrelated threat actors.