313 Team

313 Team (often branded as “Team 313”) is a pro-Iranian, religiously framed hacktivist collective that positions itself as “Islamic cyber resistance in Iraq, soldiers of Imam Mahdi” on Telegram and related channels. Publicly observed activity is dominated by disruptive operations (primarily DDoS) and propaganda-oriented claims against geopolitical adversaries of Iran, especially the United States, Israel, and Gulf states aligned with them.

In June 2025, 313 Team publicly claimed responsibility for a Distributed Denial-of-Service (DDoS) attack that briefly disrupted Donald Trump’s Truth Social platform shortly after the U.S. announced strikes on Iranian nuclear facilities; this claim was echoed in mainstream media, DHS-linked commentary, and private-sector threat reporting that describe the group as Iran-aligned hacktivists. In September 2025, The Cyber Shafarat reported that 313 Team, together with Yemen Cyber Army and Cyber Islamic Resistance-Axis, conducted a coordinated cyberattack against the Saudi government’s “Qiwa” HR platform, reportedly impacting services for several hours.

INFERENCE (confidence: high): 313 Team acts as a propaganda-heavy, operationally modest but increasingly visible component of the wider “Axis of Resistance” cyber-ecosystem, overlapping with entities such as Cyber Fattah Team, Yemen Cyber Army, Handala, and Liwaa Muhammad. The group’s activities currently appear focused on opportunistic, event-driven disruption and narrative amplification rather than on high-end, long-term intrusions, but convergence with more capable partners means its brand can surface around higher-impact joint operations.