Soldiers of Solomon

Soldiers of Solomon is a public-facing persona linked to the CyberAv3ngers cluster, used to claim cyberattacks against Israeli and Western targets. Active since at least early 2026, the persona follows the Iranian pattern of operating hacktivist-branded identities to provide deniability while amplifying the psychological impact of attacks. Soldiers of Solomon claims align with CyberAv3ngers' focus on critical infrastructure and ICS targets, and share the same IRGC-attributed operational context. MITRE ATT&CK lists Soldiers of Solomon as an associated name for the CyberAv3ngers group (G1027).